About the company
Resend is building the modern email sending platform for developers. We care deeply about quality, craft, and the developer experience. Our fully remote team of 50 spans 15 countries and counting. We're backed by a16z, Y Combinator, and others.
Responsibilities
- Build and improve the security foundations of Resend’s platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls
- Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines
- Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events
- Review and update our processes/pipelines so that security is “built-in”, not “bolt-on”
- Raise the security bar
Requirements
- Have experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products
- Can write code and are comfortable reading application, infrastructure, and deployment code
- Understand authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines.
- Independently prioritize and drive your day-to-day as the first dedicated security hire
- Prefer practical improvements over heavy processes
- Are low-ego, direct, curious, and willing to learn from others
- Care about developer experience and believe security should be easy to adopt
Conditions
- Autonomy to "just ship it"
- 100% remote team with flexible working schedules
- Modern tech stack (Next.js, Raycast, Notion, etc.)
- Honest and low-ego team
- Ownership of problems and solutions
- Comp: $140,000 - $160,000 USD, commensurate with experience