Security EngineerActive

PostHog
Apply now

The opportunity

Transparency: Everyone can read about our roadmap, how we pay (or even let go of) people, our strategy, and how we work, in our public company handbook . Internally, we share revenue, notes and slides from board meetings, and fundraising plans, so everyone has the context they need to make good decisions.

What you'll do

  • A suite of analytics and observability tools, including product analytics ,: replay vision , AI observability , and error tracking

  • PostHog MCP for users and their agents to query and act on their product and business data

  • Data warehouse so users can query product and customer data together using custom SQL insights.

  • Product-led . More than 500K organizations have installed PostHog, mostly: driven by word-of-mouth. We have intensely strong product-market fit.

  • Default alive . Revenue is growing incredibly quickly, and we're very: efficient. We raise money to push ambition and grow faster, not to keep the lights on.

  • Well-funded. We've raised more than $180m from some of the world's top: investors. We're set up for a long, ambitious journey.

What they're looking for

  • Cloud Native: You have 3-5+ years of experience in security engineering with a heavy focus on AWS. You know your way around IAM, VPC logs, and CloudTrail like the back of your hand.
  • Detection Specialist: You’ve used CSPM/CNAPP tools (like Wiz or Prisma) and, more importantly, you know how to build detection pipelines that engineers actually trust.
  • Battle-Tested: You’ve led incident response before. You’re calm under pressure and know how to coordinate across teams to contain a threat.
  • High Autonomy: We don’t have a security SOC. You’ll be building this function from scratch, so you need to be comfortable deciding what’s important and executing on it without a manual.
  • Engineering skills: You bring strong engineering experience and next to digging into code to understand an exploit or a vulnerability, you can write code with the same proficiency as our product engineers.
  • Communication and attitude: As mentioned before we don't do "Security says no", we do "Security says 'here is how to do this safely.” This is crucial for us, we need people that want to enable engineers and work with them, not limit them.