Staff Security Engineer
Core
Own and scale application security for Redpanda's streaming engine, cloud control plane, and data-transform SDKs, focusing on secure SDLC, threat modeling, and vulnerability management.
Role type
Staff Security Engineer (Application Security)
Builds
Secure C++ core streaming engine, Go cloud control plane, and Rust/Go data-transform SDKs
Domain
Data infrastructure / Streaming platforms
Required skills
Application security, Threat modeling, Secure code review (C++/Rust/Go), Fuzzing, SAST/SCA/DAST, Software supply chain security, CI/CD security, Cloud security (AWS/GCP/Azure), Kubernetes security
Preferred skills
Memory safety expertise, Concurrency handling, Open-source security contributions, Compliance program experience (SOC 2/ISO 27001)
Technologies
C++, Go, Rust, libFuzzer, AFL++, OSS-Fuzz, ASan, UBSan, MSan, GitHub, Claude Code
Responsibilities
Lead threat modeling and secure design reviews, Own application security testing (SAST, SCA, DAST), Build fuzzing harnesses for the core engine, Drive deep secure code review, Operate PSIRT and coordinated vulnerability disclosure, Strengthen software supply chain security, Stand up security champions program
Seniority
Staff, hands-on IC with strategic influence