Security Tooling Engineer Jobs

Why Harvey At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. Role Overview Harvey is looking for a Strategic Sourcing Manager to join the Finance team and own sourcing for our engineering technology and software categories. You will report directly to the Head of Procurement, based in the San Francisco HQ office. This role owns the commercial relationship with the vendors that support Harvey's product and engineering organization: cloud infrastructure, data platforms, security and observability tooling, developer platforms, and enterprise SaaS. You will run competitive sourcing events, negotiate pricing and terms that improve as Harvey scales, manage the renewal pipeline, and partner with Engineering, Security, Legal, and FP&A to get deals done without unnecessary friction. Harvey's spend is scaling fast, and our sourcing motion has to sc

About the Role MongoDB is looking for a Senior InfoSec Analyst to join our Computer Security Incident Response Team. You will detect, investigate, and respond to security events across our corporate and cloud environments. You'll act as a technical lead on incidents, mentor analysts, and work with Engineering, IT, Legal, and Privacy teams to reduce risk. We are looking to speak to candidates who are based in Gurugram for our hybrid working model. What You'll Do Lead investigations from triage through containment, scoping, remediation, and postmortem for security events Analyze logs, endpoint telemetry, and cloud and SaaS audit data to distinguish true positives from false positives and reconstruct attacker or user activity timelines Investigate credential and secret exposure, endpoint detections, phishing, data exposure, and policy violations such as unauthorized tool or AI usage Automate repetitive response work using scripting and APIs, including enrichment, ticketing, and notification workflows Maintain runbooks, playbooks, and severity and escalation standards Contribute to employee-facing security guidance and awareness Mentor junior analysts and help raise the team's investigative and communication standards What We're Looking For 5+ years in security operations, incident response, detection engineering, or a related field Hands-on experience leading incidents end to end, including clear stakeholder communication during and after an event Strong log analysis skills in a SIEM and fluency with EDR tools Working knowledge of cloud security (AWS, GCP, or Azure), identity and access management, and SaaS security Solid understanding of attacker techniques and frameworks such as MITRE ATT&CK Ability to prioritize and make sound decisions under ambiguity and time pressure Strong written communication, including incident reports and executive-ready summaries Nice to Have Experience integrating LLM or AI tooling into security workflows, or assessing AI-related risk

Department: Product Reports To: Head of Product Employment Type: Full-Time Location: Chicago, IL – In-Person Salary : $140,000 – $180,000 Technical Product Manager, Infrastructure & DevOps Location: Chicago, IL (West Loop) - Hybrid Reports to: Head of Product About the Role tastytrade is looking for a Technical Product Manager to own the roadmap for our infrastructure and DevOps capabilities — the systems that keep our trading platforms fast, stable, and secure, and that our engineers rely on to ship code confidently. You'll drive the strategy for our CI/CD pipelines, cloud infrastructure, and infrastructure-as-code, working closely with the engineers who build and operate them. This is a hands-on, technical role. You'll be trusted to dig into architecture and tooling decisions alongside engineers, make prioritization calls, and represent infrastructure priorities clearly to leadership. What You'll Do Own the roadmap for infrastructure and DevOps priorities — including CI/CD pipelines infrastructure-as-code and our AWS cloud environment — in partnership with the infrastructure engineering team. Work with backend teams (Ruby and Java) to understand where infrastructure or tooling gaps are slowing down delivery or creating risk. Prioritize and sequence infrastructure work against the needs of application teams building customer-facing trading platforms, account opening flows, and internal tools. Define what "healthy infrastructure" looks like for tastytrade — tracking metrics like deployment frequency, incident frequency/MTTR, and infra cost, and using them to justify roadmap decisions. Partner with infrastructure engineers to improve build/test/deploy workflows so engineers can ship changes to production quickly and safely. Lead build-vs-buy evaluations for infrastructure tooling and vendors (e.g., containerization, observability, config management), weighing cost, speed, security, and long-term scalability. Ensure infrastr

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About The Role Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters What You'll Achieve Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. Build tooling and automation that speed u

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About The Role Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters What You'll Achieve Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. Build tooling and automation that speed u

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About The Role Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters What You'll Achieve Design and maintain high-signal detections across cloud, identity, endpoints, and SaaS environments. Build and improve the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. Develop tooling and automation that accelerate triage, enrichment, investigation, and detection

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About The Role Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters What You'll Achieve Design and maintain high-signal detections across cloud, identity, endpoints, and SaaS environments. Build and improve the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. Develop tooling and automation that accelerate triage, enrichment, investigation, and detection

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast. This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening. Responsibilities Incident Response Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review. Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken. Communicate incident status, impact, and risk clearly to technical and executive audiences. Participate in and help shape the security on-call rotation. Investigation & Forensics Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts. Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents. Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whethe

Here at Datadog, we think about offensive security a little bit differently. We embrace automation and AI to run adversary simulations continuously across a massive cloud-native environment, and we expect our offensive engineers to build the tooling that makes that possible. We're looking for a Senior Security Engineer who can execute sophisticated red team operations, write the code that scales them, and take an AI-first approach to offensive security engineering. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Plan and execute red team engagements end-to-end, simulating real-world threat actors across cloud infrastructure (AWS, GCP), Kubernetes, CI/CD pipelines, and corporate environments Build and maintain custom offensive tooling, automation frameworks, and engagement infrastructure, treating offensive operations as a software engineering problem Develop custom payloads and evasion capabilities tailored to Datadog's environment and modern defensive controls (EDR, SIEM, network monitoring) Improve the efficiency of offensive operations through thoughtful use of automation and AI, accelerating reconnaissance, vulnerability analysis, and reporting workflows Partner with the Detection & Response team on purple team exercises to validate detection logic, improve alert fidelity, and influence threat models Translate offensive findings into concrete improvements by working directly with defensive security and engineering teams to close gaps Who You Are: You have 5+ years of hands-on experience in offensive security (red teaming, penetration testing, or adversary simulation) with a track record of operating against mature, well-defended environments You write production-quality code (Python, Go, or similar), can build your own tools, and automate your w

Join NVIDIA, a company with over 25 years of experience advancing visual technology, personal gaming platforms, and high-performance computing! We have pushed innovation through our innovative technology and talented team. As we expand into AI's vast possibilities, we need a Senior Security Engineer, Architecture Patterns to build the future of computing. In this role, you will be involved in the latest AI developments, uphold security standards, and contribute to powerful projects alongside top talent in Santa Clara, CA. Join us! What you'll be doing: Develop shift-left solutions that embed security standards directly into AI-generated code, ensuring constraints, scaffolds, rules, and guardrails are applied during the coding process rather than post-shipment. Convert written security standards into machine-enforceable formats, enabling programming assistants and pipelines to apply them seamlessly without manual interpretation. Engineer verification workflows that confirm generated code meets claimed standards, providing evidence for downstream release gating and policy enforcement. Maintain and evolve evaluation harnesses, reference repositories, known-bad cases, and encouraged findings to ensure constraint-steered agents produce conformant code amid changing models, patterns, and tooling. Convert approved architecture patterns into secure, runnable reference implementations, such as templates, Helm charts, container images, and worked examples, ensuring their reliability as platforms evolve. Elevate AI solutions from prototypes to enterprise-grade products, focusing on versioning, observability, latency and cost budgets, access control, audit, graceful failure, and a detailed support and deprecation model. Set the enterprise-grade architecture standards for AI tooling in a security context, determining qualification criteria and monitoring adoption and outcomes to ensure effic

We are hiring an experienced Security Software Engineer (Staff or Senior) for our Infrastructure Security team to design and build scalable security controls and services within MongoDB Atlas multi-cloud infrastructure. The team sits within the Site Reliability Engineering organization and works with other engineering teams to ensure that our infrastructure adheres to the highest security standards. This role can be based out of our Dublin office, or work fully remotely in Ireland. Responsibilities: Design and build core security primitives and services that protect MongoDB Atlas compute, networking, and identity across AWS, Azure, and GCP Build secure-by-default infrastructure using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups), Kubernetes, and eBPF to enforce runtime policies and gain deep visibility into systems behaviour Develop APIs, automation, and tooling that manage security posture at scale (CSPM, vulnerability management, workload identity) and provide monitoring, logging, and alerting pipelines that integrate with our tooling (Grafana, Splunk, Victoria Metrics.) Integrate security into our CI/CD and infrastructure-as-code workflows (Terraform) so that security controls are versioned, reviewed, and deployed just like any other code Lead complex projects end‑to‑end, from problem discovery and design docs to implementation, rollout, and long‑term ownership Collaborate with SRE, platform and product engineering teams to define secure architectures for new infrastructure and services Qualifications: You might be a great fit if you match some of the following: 5+ years of experience in Software Engineering, Site Reliability Engineering, or similar roles, preferably with relevant security work Proficiency with at least one programming language (Java, Golang, Rust, Python, or C/C++) and experience with infrastructure-as-code tools (Terraform) to automate security configurations and processes A deep understanding of Linux and networking concepts,

We are hiring an experienced Security Software Engineer (Staff or Senior) for our Infrastructure Security team to design and build scalable security controls and services within MongoDB Atlas multi-cloud infrastructure. The team sits within the Site Reliability Engineering organization and works with other engineering teams to ensure that our infrastructure adheres to the highest security standards. This role can be based out of our New York City, Austin, Seattle or San Francisco offices, or work fully remotely on standard East Coast business hours. Responsibilities: Design and build core security primitives and services that protect MongoDB Atlas compute, networking, and identity across AWS, Azure, and GCP Build secure-by-default infrastructure using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups), Kubernetes, and eBPF to enforce runtime policies and gain deep visibility into systems behaviour Develop APIs, automation, and tooling that manage security posture at scale (CSPM, vulnerability management, workload identity) and provide monitoring, logging, and alerting pipelines that integrate with our tooling (Grafana, Splunk, Victoria Metrics.) Integrate security into our CI/CD and infrastructure-as-code workflows (Terraform) so that security controls are versioned, reviewed, and deployed just like any other code Lead complex projects end‑to‑end, from problem discovery and design docs to implementation, rollout, and long‑term ownership Collaborate with SRE, platform and product engineering teams to define secure architectures for new infrastructure and services Qualifications: You might be a great fit if you match some of the following: 5+ years of experience in Software Engineering, Site Reliability Engineering, or similar roles, preferably with relevant security work Proficiency with at least one programming language (Java, Golang, Rust, Python, or C/C++) and experience with infrastructure-as-code tools (Terraform) to automate security configurations

We are seeking a highly technical Security Engineer to join our Product Security team. This role is integral to ensuring the security and integrity of our products and services. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy. Your expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and terraform orchestration will be crucial in identifying and mitigating potential security vulnerabilities. You will also structure complex problems, diagnose root causes independently, and clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. You will: Leverage broad product security expertise to build and maintain software tooling that secures every layer of the modern AI/ML software ecosystem. Conduct in-depth code reviews to identify and remediate security vulnerabilities. Evaluate and enhance the security of our product offerings, through RFC and service review. Implement and maintain CI/CD pipelines with a strong focus on security. Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code. Utilize terraform orchestration to ensure secure and efficient infrastructure management. Guide engineering teams to build robust long-term solutions that consider security and privacy. Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. Influence the security strategy and direction of the team, advocating for best practices and continuous improvement. Ideally, you’d have: Demonstrated ability to drive multi-month security initiatives independently, from problem definition through execution, without requiring significant direction. Proven experience as a Security Engineer with a focus on product security. Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. At Spotify, security helps make innovation possible. Our Enterprise Security team protects the systems and technology that support our employees and the more than 700 million people who use Spotify. We're looking for a Security Engineer to help strengthen our enterprise security across identity, devices, networks, and AI-powered tools. You'll build practical solutions, work with teams across the business, and help us create a secure environment where people can do their best work. What You'll Do Improve enterprise security by identifying risks and implementing solutions that protect Spotify while supporting a great employee experience. Design and build security tools, integrations, and automation to make security processes more effective and scalable. Analyze security data to identify gaps, understand emerging risks, and guide improvements. Implement security controls across identity and access management, enterprise applications, endpoints, and cloud-based services. Assess security risks associated with AI tools and agents, and help develop safeguards that support responsible adoption. Collaborate with IT, infrastructure, and security teams to strengthen security across devices, networks, and enterprise systems. Evaluate and improve enterprise security technologies, including managed browsers and device security tools. Share your expertise and work with colleagues across technical and non-technical teams to make security practices clear, practical, an

About Pinterest: Millions of people around the world come to our platform to find creative ideas, dream about new possibilities and plan for memories that will last a lifetime. At Pinterest, we’re on a mission to bring everyone the inspiration to create a life they love, and that starts with the people behind the product. Discover a career where you ignite innovation for millions, transform passion into growth opportunities, celebrate each other’s unique experiences and embrace the flexibility to do your best work. Creating a career you love? It’s Possible. At Pinterest, AI isn't just a feature, it's a powerful partner that augments our creativity and amplifies our impact, and we’re looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities, we’ll explore your foundational skills and how you collaborate with AI. Through our interview process, what matters most is that you can always explain your approach, showing us not just what you know, but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here . Pinterest is seeking an experienced Security Engineer to build and implement detection and response improvements and adapt to emerging threats to protect employees and infrastructure. In this role you will have the opportunity to solve challenging problems and provide a meaningful impact on our overall security posture. We are looking for a candidate with a passion for both security and innovation. What you'll do: Build alerts and automation workflows to improve capabilities to detect and response to external and internal security threats Manage our logging pipelines and infrastructure and onboard new logging sources to improve our detection coverage Develop and maintain internal tooling to expand and automate team detection and response capabilities Respond to alerts generated from our tooling and run incidents as part of an on-call rotation Co