Security Engineer

Fireflies.ai is looking for a hands‑on Security Engineer to protect our infrastructure, product, and user data as we scale globally. This role is ideal for someone who can ship code, automate security workflows, triage vulnerabilities, and work closely with engineering teams to build secure systems.

• Build and improve security controls across our product, backend, and infrastructure.
• Review code, architecture, and infrastructure for security risks.
• Run vulnerability assessments, penetration testing, and security audits.
• Debug and patch security issues in backend systems.
• Manage bug bounty triage and remediation workflows, including Hacker One.
• Automate security checks, alerts, and vulnerability workflows.
• Partner with engineering teams to promote secure coding practices.
• Support incident response and security investigations.
• Configure and maintain security tools such as firewalls, IDS/IPS, scanners, and monitoring systems.

• 3+ years of experience in security engineering, backend security, or infrastructure security.
• Strong backend development experience with Node.js/Type Script.
• Ability to ship code end‑to‑end.
• Good understanding of authentication, authorization, cryptography, and common vulnerabilities.
• Experience with security tools such as Git Hub Advanced Security, Dependabot, Crowd Strike, Falco or similar.
• Experience with cloud security, preferably GCP or AWS.
• Familiarity with Kubernetes, Docker, and modern infrastructure security.
• Strong problem‑solving and communication skills.

• Experience with SaaS or high‑growth startup environments.
• Bug bounty program experience.
• Experience with SOC 2, HIPAA, GDPR, Vanta, or similar.
• Contributions to the security community, such as CVEs, talks, or open‑source work.
• Experience with Dev Sec Ops  or security automation.

• Node.js, Type Script
• Go
• MongoDB
• Kubernetes, Docker
• GCP
• Pub/Sub architecture
• Hacker One, Vanta, Git Hub Advanced Security

• Competitive compensation
• Work remotely anywhere in your respective country
• Ability to move laterally within a team and grow rapidly
• Paid time off and flexible leave policy
• No boss culture
• Flexible working hours
• LGBTQ+ friendly
• Company offsites
• Tech reimbursements

We are an equal opportunity employer and strongly value diversity at our company because our team will be stronger with different perspectives and experiences. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.