Senior Security Engineer, Magic

• The ideal candidate will be an innovative self-starter, who is motivated by our mission and results-driven, and will be able to extract, assimilate, and correlate a wide variety of data in order to surface and disrupt threat actors across multiple spaces
• 6+ years of security engineering or software security experience in either frontend or backend environments
• Experience with programming and scripting languages such as Python, Golang, or TypeScript
• Excellent Incident Management skills to navigate and lead incidents adeptly to ensure platform uptime

Desirable

• Magic's security team is critical – it is responsible for safeguarding Magic’s tools and products
• We are looking for a Senior Security Engineer to play a pivotal role in expanding our security program
• The Senior Security Engineer will also work on some of the most challenging and high-visibility risks the company is facing
• You will identify and mitigate security risks in our product and infrastructure, in addition to conducting security assessments, and assist with investigations
• Contribute to further securing our SDLC, to include secure coding practices, CI/CD pipelines, and regression tests
• Lead and grow our vulnerability management program, which spans across our cloud infrastructure (AWS) and endpoint machines (macOS)
• Collaborate with Engineering teams to harden our frontend and backend systems (Next.js, Typescript, AWS, Python)
• Foster your extensive experience securing a cloud microservices platform like Kubernetes, including ingress/egress, and container communication
• Manage our external bug bounty program and be able to technically contribute to mitigations
• Support compliance standards like NIST, ISO 27001, SOC 2 Type 2, and GDPR
• Build a security mindset across the organization by providing security guidance and best practices
• Take a holistic approach towards security, ensuring coverage from code quality up and out to our edge services including Cloudflare and Vercel
• Participate in 24/7 on-call and security incidents, acting as Incident Manager