Senior Site Reliability Engineer, Gorgias
Security
€84.3-93.2k
0.005% – 0.013%
The conversational AI platform for eCommerce
Posted today
The conversational AI platform for eCommerce
501-1000 employees
Posted today
€84.3-93.2k
0.005% – 0.013%
501-1000 employees
Company mission
To empower eCommerce brands to grow through AI-powered customer experience.
Role
Who you are
- 5+ years in infrastructure security, cloud security, or security engineering — ideally in a high-growth SaaS environment
- Deep GCP and Kubernetes expertise — GKE, workload identity, network policies, RBAC; you know where the bodies are buried
- Strong networking fundamentals — VPC design, peering, firewall architecture, zero-trust networking
- Hands-on CI/CD and IaC hardening — GitHub Actions, ArgoCD, Terraform security patterns
- Auth expertise — OAuth 2.0, OIDC, SAML; you can design and audit identity flows, not just enable SSO
- Policy-as-code experience — OPA, Kyverno, or equivalent; guardrails at the platform layer
- Detection and response background — SIEM, IDS, runtime security tools, and experience writing real runbooks
- Compliance experience — SOC 2 (Type II preferred), ISO 27001, GDPR/PII data protection
- Scripting fluency — Python Go, Bash for automation, tooling, and incident response scripts
What the job involves
- As a Gorgias Platform Security Engineer, you will contribute to our security program, working directly with our SRE team and engineering leadership
- You will implement and manage essential security tools and processes, with a particular focus on ensuring resilience against potential external threats and attacks
- This role will be critical in setting up proactive security measures and responding to incidents, making a tangible impact on Gorgias’ ability to meet enterprise-grade security standards
- Own cloud and Kubernetes security — IAM, RBAC, network policies, workload identity, and GKE hardening across 10+ global clusters
- Design secure-by-default platforms — build guardrails and policy enforcement (OPA, Kyverno, or similar) that guide teams without blocking them
- Harden CI/CD and IaC pipelines — secure GitHub Actions, ArgoCD, and Terraform workflows end-to-end
- Lead secrets management — design and implement decoupled secrets architecture so credentials never live in deploys or repos
- Strengthen networking fundamentals — VPC design, peering, cross-cloud connectivity, and zero-trust segmentation
- Build security-focused logging and monitoring — design the observability layer that actually catches threats, not just collects noise
- Implement runtime detection — IDS, file integrity monitoring, and behavioral anomaly detection across GKE workloads
- Develop incident response playbooks — practical, tested runbooks for common incident types; own the response process end-to-end
- Manage and evolve the SIEM — drive meaningful signal-to-noise improvements and build automated mitigation where it matters
- Design and enforce strong auth standards across internal tools, APIs, and customer-facing surfaces
- Audit and mature privileged access management — ensure least-privilege is real, not theoretical
- Own the ongoing health of SOC 2 Type II — keep controls tight between audits, not just before them
- Drive the next compliance milestones — ISO 27001 and data protection (PII, GDPR) as we expand enterprise and global reach
Our take
With the surge in online shopping, eCommerce merchants are increasingly prioritizing customer communications to enhance the overall shopping experience. This heightened emphasis puts greater pressure on support teams to promptly and accurately address customer inquiries.
Gorgias offers an all-encompassing customer support helpdesk equipped with artificial intelligence tools tailored for customer service teams. The platform allows eCommerce businesses to streamline responses to frequently asked questions through a single application. By automating these responses, support agents can allocate more time to engaging in meaningful and profitable interactions with customers, thereby potentially driving sales.
Catering to over 15,000 brands, including prominent brands like Princess Polly, Steve Madden, and Marine Layer, Gorgias faces competition from established players like Zendesk, Freshdesk, and HelpScout. Despite this, the company has experienced notable growth, expanding its presence across the US, Europe, and Australia. Along with funding that will fuel the development of its Automation Add-on feature, aimed at providing customers with instant answers to alleviate support workload.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
19% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
May 2024
$29m
SERIES C
Aug 2022
$30m
SERIES C
Total funding: $101.4m
Company HQ
Yerba Buena, San Francisco, CA
Leadership
Alex Plugaru
(Co-Founder & CTO)Former Web Developer at Gymglish, Eau de Web, Innobyte and Liquid Studios.
Romain Lapeyre
(Co-Founder & CEO)Former Product Manager at Work4 and Business Developer at Scalr. MA in Management from HEC Paris.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 12 more jobs at Gorgias