[Remote] Senior Security Engineer

Note: The job is a remote job and is open to candidates in USA. ngrok builds a cloud networking platform that secures, transforms, and routes traffic to services. The Senior Security Engineer will establish and own the security engineering program, building automated guardrails, developer-facing tooling, risk assessments, and detection and response capabilities.

Responsibilities

• Audit the current state of security tooling, pipeline coverage, cloud posture, and detection capabilities, and turn that into a prioritized security roadmap tied to ngrok's business objectives
• Ship developer-facing security tooling: automated checks in CI/CD, secrets scanning, dependency vulnerability tracking, and secure-by-default libraries that make the right choice the easy choice
• Run a structured risk assessment across product and infrastructure to document what we know, what we don't, and what needs to change
• Establish guardrails for how we use AI in our engineering pipeline — policies and tooling that let us move fast without introducing new risk classes
• Stand up baseline detection and response: log coverage, alerting, and a documented incident response process
• Own the security engineering program end-to-end over time — clear ownership, documented controls, meaningful metrics, and an internal security platform (reusable libraries, self-service tooling, automation) that reduces the security burden on every engineer

Skills

• You've worked in a security engineering role where you shipped tooling, built automation, or owned security infrastructure — not just reviewed it
• You have strong engineering fundamentals and are comfortable writing quality code in Go or Java, Rust, C, C++
• You know how to integrate security checks into CI/CD pipelines without slowing teams down
• You have hands-on experience with cloud security, particularly AWS (IAM, VPC, CloudTrail, GuardDuty)
• You understand AI/ML security risks like prompt injection, insecure code generation, and LLM-assisted attack vectors
• All candidates must be US-based, and legally authorized to work in the United States
• Applicants must be authorized to work in the United States on a permanent, ongoing basis without the need for current or future sponsorship
• You've built internal security platforms or developer-facing security tooling
• You've done detection engineering — writing detection rules, tuning signals, reducing alert fatigue
• You've secured networking or developer infrastructure products

Benefits

• Full premiums covered for employees on base healthcare, dental, and vision; half covered for dependents.
• Mental health and well-being support included.
• 401(k) with 100% match up to 3% of salary and 50% match up to another 2%.
• Open, flexible vacation policy.
• Up to 16 weeks of parental leave for employees who give birth; up to 8 weeks for new parents through birth, adoption, or fostering.
• Annual professional development budget for books, courses, conferences, or other development needs.
• Annual home office/desk stipend.
• Co-working space stipend for employees who want to work outside their home and aren't near the San Francisco office.
• Lunch provided 2x+ per week for employees onsite at the San Francisco office.
• Company offsites twice a year.
• Bi-annual reviews with feedback and competitive compensation.
• Remote work for candidates outside the Bay Area; hybrid work for candidates within commuting distance to San Francisco, with office attendance on Tuesdays and Wednesdays.

Company Overview