Principal Software AppSec Engineer
Job Summary
As a hands-on Security Engineer, you will play a crucial role within the infrastructure engineering team at Chronosphere. You will define and build core security engineering efforts to create a foundational security infrastructure used across the entire company. The goal is to ensure security serves as a shared guardrail, never a bottleneck, for all development projects.
Responsibilities
- Design and implement core security infrastructure
- Manage access control, vulnerability, and detection systems
- Lead design reviews and threat modeling
- Collaborate on organizational security roadmaps
Required Skills
- 10+ years in security or infrastructure engineering
- 3+ years building infra software (Go/Python)
- Vulnerability management expertise
- Incident response leadership
Job Details
Key Responsibilities
- Design, implement, and work with other engineering teams to operate security tools and programs across the organization, including access control & workflows, vulnerability management, and detection/response systems.
- Collaborate with other engineers and with the business to identify the highest priority needs of the organization, and maintain a roadmap to address those needs.
- Actively participate in design reviews, threat modeling, and incident analysis.
- Help teams make high-quality security decisions, especially in ambiguous situations.
- Set the bar for security, ownership, and quality across engineering.
Qualifications Required
- 10+ years in security or infra-focused engineering roles with meaningful security ownership.
- The ability to independently own projects from inception to delivery.
- A systematic problem-solving approach, coupled with strong communication skills and a sense of ownership and drive.
- Empathy for the problems faced by developers, and a passion for building tools and systems that address those problems.
- Built vulnerability management systems that actually drive risk down.
- Led security incident response efforts and postmortem improvements.
- Strong interest in how things work. Curiosity and persistence is key to building the understanding needed to apply.
- A flexible, collaborative working style.
- 3+ years of experience building infrastructure software in Go or Python.
Preferred Qualifications
- Experience building foundational security programs at growth-stage companies.
- Familiarity with compliance frameworks, but a healthy skepticism of security theater.
- An outstanding ability to communicate risk with both technical and non-technical audiences.
- Experience working with C++ or Rust.