Senior / Staff Security Engineer
RemoteFull-timePosted 4d ago
About the role
Security-focused engineer role at Linear, responsible for hands-on security across product and infrastructure, including vulnerability management, incident response, product security testing, and cloud security, with high autonomy and collaboration with GRC/Trust.
Responsibilities
- Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical
- Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive
- Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying solely on scanners
- Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work
- Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults
- Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth
- Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice
Qualifications
- A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security)
- Hands-on and technical: you can read and reason about code (TypeScript), comfortable in cloud environments (GCP a plus), and you can go deep on a finding
- Comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc)
- Calm under pressure: able to lead an incident from first alert through postmortem
- Builder mindset: prefer shipping tools/scripts over repeating manual processes
- Pragmatic risk-reducer focused on actual risk reduction
- Autonomy-oriented with strong communication skills to explain technical findings to non-technical stakeholders
Skills
Required:Vulnerability managementIncident responseProduct security testing (AppSec)Cloud security (GCP, k8s, Postgres)Security tooling & automation
Benefits
- Competitive salary and equity
- Employee-friendly equity terms including early exercise in the US and extended exercise windows
- Daily meal and coffee stipend on every workday
- Paid co-working space or desk
- Health coverage (based on country requirements)
- 5 weeks paid vacation, plus local statutory holidays
- 4 months paid parental leave
- Paid month off after 4 years & every 2 years thereafter
- Regular team events and off-sites
- Remote-first with no required commute
Last updated Oct 21, 2026. Interested? Apply on the company site.
About Linear
Plan and build your product
Linear streamlines issues, projects, and roadmaps. Purpose-built for modern product development.
ai-infrastructure-and-developmentbrex-fastest-growing-2025issue trackingproduct developmentproject managementroadmapswing-list-2026wing-list-2026-mid-stage
More open roles at Linear
- Customer Success Manager, APAC4d agoRemote · GTM
- Solutions Engineer, APAC4d agoRemote · GTM
- Account Executive, Growth2w agoHybrid (Singapore) · GTM
- Account Executive, Enterprise2w agoHybrid (Singapore) · GTM
- Customer Success Manager, Growth1mo agoRemote · GTM