Software Engineer - Information Security

The Software Engineer - Information Security is responsible for integrating security into every layer of the organization''s cloud-native database platform. This role focuses on protecting critical infrastructure through design and implementation of security controls, proactive threat testing, collaboration on secure coding practices, and ensuring compliance with industry security standards. The position directly impacts the resilience and trustworthiness of the platform by embedding security throughout development and operations, helping maintain the platform's integrity as it scales

.

3. Responsibilitie

s:* Design and implement security controls for a cloud-native database platfo

rm* Collaborate with engineering teams on security reviews, threat modeling, and secure coding guidan

ce* Conduct proactive red teaming and penetration testing to identify and mitigate vulnerabiliti

es* Evaluate, procure, and deploy security tools to enhance the organization's security postu

re* Work with compliance teams to maintain adherence to SOC 2, PCI DSS, and other framewor

ks* Develop security automation and tooling to scale security practices across engineeri

ng* Respond to security incidents and lead post-incident reviews to improve resilien

ce

4. Requiremen

ts:* 5+ years of software engineering experience focused on security engineering or application secur

ity* Proficiency in Go and experience with Python, Java, or

C++* Experience securing cloud-native applications and infrastructure on AWS, GCP, or Az

ure* Knowledge of database security, encryption, and access contr

ols* Familiarity with security frameworks such as SOC 2 and PCI

DSS* Understanding of threat modeling, security architecture, and secure cod

The organization operates in the database technology industry, focusing on scalable, cloud-native database platforms. It addresses the critical challenge of securing vast amounts of digital data for major applications by providing both PostgreSQL and Vitess clusters, with plans to support sharded PostgreSQL clusters. The platform protects millions of queries per second for large-scale applications, emphasizing security as a core element of its infrastructure. The organization serves high-growth companies across sectors such as gaming, consumer tech, and B2B SaaS, supporting applications used by hundreds of millions of users worldwide. It is recognized for rapid growth and a commitment to building small, high-performing teams.