Senior Security Engineer

About the Role

Hopper's Security team is small by design and consequential by impact, and this role sits at the centre of it. As a Senior Security Engineer you own the tooling, automation, and processes that keep our applications secure across their entire lifecycle. You build systems that make security invisible to developers and unavoidable by default, write code, ship tools, and use AI as a core part of your work.

• Own and evolve our vulnerability management program with a focus on application security — container images, dependencies, code scanning, and runtime detection.
• Build and maintain security tooling that integrates directly into CI/CD pipelines and developer workflows, so security happens automatically rather than as a gate.
• Use AI extensively to write code faster, automate analyses that would otherwise require manual review, and build intelligent tooling that scales beyond what a small team could achieve manually.
• Assess and improve how we leverage available telemetry across our systems.
• Work directly with engineering teams to influence secure development practices by shipping tools and defaults that make the secure path the easy path.
• Investigate and respond to security findings when needed, but spend more time building systems that prevent and detect issues than manually chasing them.
• Adapt quickly as priorities shift; our team is agile and tomorrow's challenge may look different from today's.

• At least 5 years of experience in software and/or platform engineering, with the ability to design, build, and maintain production-quality tools.
• Deep experience in application security and vulnerability management — understanding CVEs, dependency risks, container security, and SDLC integration, with clear opinions about what to fix versus noise.
• Hands‑on experience with cloud infrastructure, ideally GCP/GKE or equivalent, and the ability to adapt to our stack.
• A demonstrated habit of using AI tools as a core part of how you build and analyse, not as an occasional shortcut.
• A bias toward automation — writing a tool, not a runbook, for repetitive manual tasks.
• Comfort with ambiguity and ownership; making judgment calls on priority, approach, and scope without waiting for direction.
• Experience influencing engineering culture around security, knowing how to make developers care without slowing them down.
• Strong written and verbal communication skills, including the ability to articulate our security posture clearly to customers when needed.

• Well‑funded and proven startup with large ambitions, competitive salary and the upsides of pre‑IPO equity packages.
• Unlimited PTO.
• Carrot Cash travel stipend.
• Access to co‑working space on demand through Flex Desk and a work‑from‑home stipend.
• Generous parental leave, more above industry standards.
• Entrepreneurial culture where pushing limits and taking risks is everyday business.
• Open communication with management and company leadership.
• Small, dynamic teams with massive impact.
• 100% employer‑paid Medical, Dental and Vision coverage for employees.
• Access to Disability & Life insurance.
• Health Reimbursement Account (HRA).
• DCA/FSA and access to 401(k) plan.

Compensation Range: $110K - $300K