Senior Security Engineer, PagerDuty

• The ideal candidate believes in securing infrastructure at scale and creating automated solutions that make security the easiest choice
• 5+ years of experience as a full-stack Security Engineer in a AWS native, micro-service SaaS environment
• Strong expertise in cloud security, particularly AWS services including but not limited to:
• GuardDuty, CloudTrail, Secrets Manager
• EKS/ECR, IAM family, Config
• Service Mesh architectures
• Proficiency with security tools:
• Vulnerability Management & EDR: Wiz, Snyk, Qualys/Nessus, Crowdstrike
• SIEM: SumoLogic or Splunk
• Experience with Infrastructure as Code and CI/CD:
• Terraform, Helm, Chef, Ansible, Buildkite, Jenkins, ArgoCD
• 4+ years of experience and proficiency in at least one programming language and framework (Python, Bash, Ruby on Rails, Elixir, or Java)
• Strong understanding of Threat Modeling principles
• Experience with Security Incident Response & Risk Management
• High appetite for challenging problems with a high degree of ownership
• Strong problem-solving abilities with effective change management skills
• Experience building Security Orchestration, Automation, and Response (SOAR) playbooks

Desirable

• PagerDuty is seeking a Senior Security Engineer (Infrastructure & Automation) to join our diverse, customer-focused team!
• As a Senior Security Engineer, you will be a key contributor leading security initiatives around foundational infrastructure supporting PagerDuty's SaaS offerings
• Your primary focus will be on infrastructure security through architecture reviews, threat modeling, and security tool implementations, while leveraging automation to scale security solutions
• Since we own and operate what we build, you'll collaborate closely with engineers across many teams to ensure we deliver secure, highly reliable, and scalable solutions to our customers
• This is an exciting opportunity to build lovable security solutions that make developers and customers happy
• Lead technical security initiatives by conducting architecture reviews and threat modeling sessions for new and existing services
• Design and implement security controls for cloud infrastructure and containerized environments
• Work closely with Product Engineering teams to review service designs (full stack) and provide security-focused recommendations
• Resolve technical ambiguity in system designs, collaborating with engineering management and staff engineers
• Monitor and maintain security tooling supporting infrastructure security controls
• Design and implement security automations and tool integrations to scale security operations
• Build and maintain security guardrails and automated compliance controls
• Develop automated vulnerability management workflows to drive timely remediation
• Create security relevant alerting and metrics for visibility and reporting
• Implement automated incident response playbooks
• Mentor and guide team members on security best practices and implementation approaches
• Participate in our team's on-call rotation, triaging and addressing security issues as they arise
• Contribute to roadmap and annual planning discussions