Security Engineer, Contentful
$187-220k
Offers stock options and equity awards
Content management platform
Be an early applicant
Content management platform
501-1000 employees
Be an early applicant
$187-220k
Offers stock options and equity awards
501-1000 employees
Company mission
To modernize how content flows by leading the transition from legacy CMS to content infrastructure.
Role
Who you are
- 8+ years of security engineering, DevSecops, or equivalent experience
- Expertise with AWS, GCP, and Cloudflare architecture, services, and security features
- Design, implement, and maintain secure CI/CD pipelines by integrating automated security controls such as SAST, DAST, dependency vulnerability scanning, and secrets management
- Proven experience designing and implementing security architecture aligned with business and technical strategies across cloud and application environments
- Mastery in Python to build and maintain security tools
- Exposure to Javascript and Go with the ability to perform security code reviews
- Deep knowledge securing Kubernetes clusters and containers, including configuration and runtime protection
- Hands-on experience using Terraform and other infrastructure-as-code tools to maintain integrity in cloud environments
- Demonstrated success driving vulnerability management, threat modeling, and incident response at scale
- Proficiency with authentication and authorization protocols and mechanisms (OAuth, SAML, JWT, IAM) to secure identity and access management
- Strong foundational networking expertise including cloud networking architectures, OSI model, TCP/IP protocols, routing, and firewall concepts
- Deep expertise in OWASP Top 10 and other application security frameworks, with proven success driving secure development practices and assessments
- Working knowledge of applying compliance frameworks controls including SOC 2 and ISO 27001
- Excellent problem-solving skills and ability to influence security strategy across teams
- Clear and effective communication skills
- Ability to articulate security risks and tradeoffs to both technical and semi-technical audiences
- Practical experience integrating multiple systems through APIs and parsing, normalizing, and integrating complex datasets between integrated systems
What the job involves
- We are looking for a committed and driven Senior Security Engineer to lead and shape security initiatives across both Contentful’s cloud-native product infrastructure and corporate environments
- In this role, you will manage daily alerts and operations while applying deep expertise in cloud technologies and security tooling, collaborating closely with cross functional teams to embed security across the business
- You will own and drive continuous improvement of key components of our security program, including threat modeling, risk assessments, architectural design collaboration, and rapid detection and response of incidents.This hands-on role offers deep technical skills development, along with the ability to influence strategic direction of the company’s architecture and security posture
- Lead initiatives, drive cross-functional prioritization, and partner on execution to advance security efforts across the organization
- Proactively identify, prioritization, and lead complex security assessments and remediation for cloud-native applications, infrastructure, and vendor integrations to drive measurable risk reduction
- Support vulnerability management efforts while advancing the program by identifying systemic gaps, expanding coverage, automating workflows, and partnering with cross functional teams to prioritize and drive scalable remediation
- Identify deficiencies, architect, and build scalable security solutions to improve coverage, efficiency, and resilience across security disciplines
- Develop and maintain scalable hardening standards and monitoring mechanism, leading adoption and long term integration across the organization
- Lead and contribute to incident investigations by executing established processes, conducting independent analysis, and coordinating effective response and remediation efforts
- Design and maintain robust detection and response capabilities for cloud and container environments
- Stay current on emerging threats, vulnerabilities, and attacker tactics, translating insights into actionable strategies
- Mentor and guide others, fostering a culture of security awareness and best practices
- Support security compliance maintenance through control ownership, automated maintenance, and enable technical teams by translating requirements into practical, actionable solutions
- Communicate complex and technical concepts clearly to leadership and stakeholders
Our take
Creating, distributing and managing digital content can be complex, time-consuming and difficult, especially at scale. Contentful solves this problem by centralizing all content management into one API-based system.
Since founding in 2013, Contentful has grown to become one of the largest companies of its kind. It now serves thousands of customers, many of which are enterprises such as Danone and Bang & Olufsen. Importantly, the company has continued to improve its offering, for example by partnering with eSSENTIAL Accessibility to offer a way for users to achieve ADA compliance.
In recent years, Contentful has grown its executive team, attracting top talent from companies like Zendesk and Atlassian which has helped to accelerate its ambitious growth strategy. It has also expanded its relationship with AWS, launching the Contentful Composable Content Platform in AWS Marketplace, a key move that will help to broaden its reach and ensure it remains a key player in the competitive CMS market.
Freddie
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jul 2021
$175m
SERIES F
Jun 2020
$80m
SERIES E
Total funding: $337.1m
Company benefits
- Full-time employees receive Stock Options for the opportunity to share in the success of our company
- Generous amount of paid time off, including vacation days, education days, and volunteer days
- Use your personal education budget to improve your skills and grow in your career
- Enjoy a full range of virtual events, including workshops, guest speakers, and fun team activities, supporting learning and networking exchange beyond the usual work duties
- Use your physical fitness budget to get away from your desk and support your physical wellness
- A monthly phone/internet stipend and phone upgrade reimbursement after 2 years
- Plus, Contentful socks! And other amazing swag as part of company events. Oh yeah!
- Access to our Employee Assistance Program (EAP) for information, support, discussion, and counseling for life’s challenges
- Comprehensive health/dental/vision care package covering 100% of monthly premiums for employees
- 16 weeks of paid parental leave to care for and focus on your growing family
- New hire office equipment stipend. Get the gear you need to work at your best
Company values
- Be humble - We are not centered on ourselves, but focus on the needs and contributions of others around them
- Embody a growth mindset - We believe in our collective potential to develop and evolve through dedication and continuous learning
- Start with the customer and work backwards - The first question we ask is “What customer need does this solve?” and treats each customer with empathy
- Strive together - Creating anything of significance without collaboration is challenging, so we work hard together to make an impact
Company HQ
Denver, Colorado, United States
Articles
Leadership
Paolo Negri
(CTO)Previously worked as Senior Developer at AutoScout24, and Senior Developer Team Lead at Wooga.
Sascha Konietzke
(CSO & Board Member)Previously worked as EMEA Manager at Hewlett-Packard, and founded a range of companies including angel investment firm Ko9.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 81 more jobs at Contentful