Senior Security Engineer, Vulnerability Management, PSIRT
1PasswordIdentity and company
Remote$153,000 USD - $214,000 USDSenior
Accel
Iconiq Growth
Lightspeed Venture Partners
Tiger Global Management
Salesforce Ventures
Slack Fund
Software Engineering
About the role
TL;DR
Senior Security Engineer to lead incident response and vulnerability management for 1Password's products.
- •{"about_the_role": "1Password is seeking a Senior Security Engineer to join their Product Security team.
- •This role will lead and mature incident response capabilities, coordinating company responses to product security incidents.", "key_responsibilities": ["Lead end-to-end response to product security incidents, from discovery, triage, remediation, and disclosure.", "Own and evolve 1Password's PSIRT function, including incident classification frameworks, severity models, escalation paths, and response playbooks.", "Drive coordinated vulnerability disclosure (CVD) processes, partnering with external security researchers.", "Serve as the primary coordinator across Product Security, Engineering, Legal, Communications, and Customer Success during active security incidents.", "Evaluate and integrate AI-powered tooling and workflows that improve incident detection and response."], "requirements": ["5+ years of career experience in IT or Engineering with a security focus.", "Hands-on experience leading or participating in security incident response.", "Experience with coordinated vulnerability disclosure (CVD) and managing relationships with external security researchers.", "Strong judgment under pressure and comfort making decisions with incomplete information.", "Experience building or formalizing incident response capabilities (playbooks, runbooks, severity frameworks)."]}
Required skills
PythonBashOWASPPenetration TestingVaultIAMSSOMFA
Domain expertise
cybersecuritydeveloper-toolsproductivity
Benefits & perks
health, dental, 401k, paid time off, equity, incentive programs, RRSP
Tech stack
PythonJavaScriptTypeScriptBashGitLinuxJiraConfluencePostmanREST APIOAuthJWTSAMLOWASPPenetration TestingVaultIAMSSOMFA