Security Engineer

About the company

• Linear builds the product development system for teams and agents; 30,000+ companies including OpenAI, Coinbase, Ramp
• Remote-first, distributed across North America, Europe, Australia

Responsibilities

• Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, drive remediation, keep SLAs meaningful
• Run the bug bounty program: triage reports, validate severity, work with engineering on fixes
• Lead product security testing: threat modeling (including AI/agent-facing surfaces), design and code review, hands-on testing
• Be a primary responder for security incidents: investigation, containment, postmortems, hardening
• Own cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close audit gaps, secure defaults
• Build and maintain security tooling and automation, including AI/LLM tooling
• Partner with GRC/Trust: feed findings into risk register and control evidence

Requirements

• 5+ years in security engineering with depth in at least two of: vulnerability management, product/appsec testing, incident response, cloud security
• Hands-on and technical: read and reason about code (TypeScript), comfortable in cloud (GCP a plus)
• Comfortable using AI coding/security tools (Linear Agent, Claude, Codex)
• Calm under pressure, able to lead an incident end-to-end
• Builder mindset: automate instead of repeating manual processes
• Pragmatic risk-reducer, autonomy-oriented, clear communicator

Conditions

• Remote-first within North America, no required commute
• Competitive salary and equity, employee-friendly equity terms
• Daily meal and coffee stipend, paid co-working space or desk
• Health coverage based on country requirements
• 5 weeks paid vacation plus local statutory holidays
• 4 months paid parental leave
• Paid month off after 4 years and every 2 years thereafter
• Regular team events and off-sites