Senior Security Engineer

Position Overview

• Location Type: Remote (with option for hybrid in San Francisco or New York office 2 days/week)
• Job Type: Full-Time
• Salary: $200K - $300K

Patreon is a media and community platform that empowers creators to build businesses by connecting with their fans. The company supports over 300,000 creators and has facilitated over $8 billion in earnings. Patreon is seeking a Senior Security Engineer (L5) to join its growing Security team. This role is crucial for protecting sensitive user data, including payment methods and financial information, and ensuring platform and corporate security and compliance.

About the Role

The Senior Security Engineer will be responsible for designing and implementing security automation, detection, and response capabilities. This role also involves owning and streamlining Governance, Risk, and Compliance (GRC) functions to ensure the platform and corporate environment remain protected and compliant, enabling secure scaling.

What You Will Do

• Design & Implement Security Solutions:
  • Architect and deploy tools and processes to enhance infrastructure and corporate security in cloud-native (AWS), containerized (Kubernetes/Docker), and on-prem environments.
  • Engineer and maintain controls across various security domains, including Endpoint Detection and Response (EDR), Cloud Detection and Response (CDR), CI/CD, SIEM, IAM, and PKI.
• Automate Security Detection & Response:
  • Develop and refine security detection rules, playbooks, and workflows for real-time threat response.
  • Build integrations and automated pipelines using DevOps/SecOps tools (e.g., Python scripting, APIs, webhooks) to expedite investigation and remediation.
• Security Incident Handling:
  • Triage and investigate security alerts and incidents, leading cross-functional coordination as needed.
  • Drive continuous improvement of incident response processes and technologies for detection and containment.
• Governance, Risk & Compliance (GRC):
  • Lead risk management efforts, including risk assessments, third-party vendor reviews, and compliance checks against frameworks like ISO, NIST, PCI, and HIPAA.
  • Develop and maintain security metrics (KRI/KPI/OKR) to report program effectiveness and guide strategic decisions.
  • Contribute to audits, assessments, and certification processes, maintaining and optimizing GRC tooling for evidence gathering and continuous monitoring.
• Cross-Functional Collaboration:
  • Partner with Product, Engineering, Legal, and other business teams to integrate security requirements into features.
  • Provide threat modeling and security architecture guidance to development teams for secure design.
• Continuous Improvement & Thought Leadership:
  • Participate in proactive threat hunting and vulnerability management programs.
  • Stay updated on industry trends, emerging threats, and new security technologies.
  • Promote security awareness, training, and best practices across the organization.

Skills and Experience You Possess

• Professional Background: Minimum of 5 years of experience in security engineering or a related field.