The opportunity
Engineering at Privy is distinguished by:
What you'll do
Own security engineering work end to end: investigate alerts, findings, anomalies, and security requests; identify root causes; drive remediation; and clearly document outcomes.
Participate in Privy’s security on-call rotation, helping respond to: incidents, triage alerts, support vulnerability workflows, complete access reviews, and handle security escalations.
Build and maintain production-quality tooling that reduces manual work,: including alert enrichment, automated triage and routing, remediation workflows, access-review automation, and detection improvements.
Lead focused investigations into suspected security events or compromises,: gathering evidence methodically and coordinating the appropriate response.
Proactively identify recurring sources of operational toil and engineer: durable solutions that improve the team’s speed, consistency, and ability to scale.
Partner with product and engineering teams to assess security risks, review: lower-complexity designs and implementation plans, and make practical security tradeoffs to deliver quickly with quality and soundness.
What they're looking for
- Experience as a security engineer, detection engineer, or similarly hands-on: engineer in a technically demanding environment.
- Strong software-engineering skills in Python, Go, Ruby, or a similar: language. You can build maintainable tooling and contribute directly to production fixes, not only one-off scripts.
- Experience investigating security signals, incidents, vulnerabilities,: suspicious activity, or other ambiguous technical problems through to resolution.
- Familiarity with security operations, incident response, vulnerability: management, detection engineering, access reviews, or related operational-security workflows.
- A strong understanding of web, browser, infrastructure, or cloud security,: with the ability to apply that understanding across a broad range of problems.
- Good judgment under pressure, a methodical approach to investigation, and: comfort working independently with agency despite incomplete information.
- Strong communication and collaboration skills, including the ability to: explain technical findings, risks, and recommended actions clearly to clients and internal stakeholders alike.
- A self-directed approach to work: you notice gaps, make progress through ambiguity, and reliably close the loop.
