Who you are

• We're seeking candidates who possess high integrity, humility, and an insatiable drive to learn
• 6+ years of professional experience in software engineering or security
• Experience designing and building secure web applications, tools, and APIs
• Experience with vulnerability review and analysis
• Strong incident leadership and diligent response
• Empathy toward the rest of the team and our customers
• Strong sense of ownership and ability to make pragmatic decisions about your work
• Detection engineering experience through implementation and maintenance of a SIEM
• Experience with any of the technologies the Render product runs on: Go, Typescript, Kubernetes, Postgres, Terraform, Temporal
• Experience with compliance frameworks such as SOC 2, ISO 27001, HIPAA or PCI
• Proven expertise in exploiting common security vulnerabilities, demonstrating practical experience in identifying and leveraging vulnerabilities to assess security posture
• Experience securing applications and systems through threat modelling and risk assessments
• Active participation and contributions to the security community through public research, blogging, presentations, and other means

What the job involves

• The Render Security team is a small, dedicated team of engineers that runs all things security at Render
• Full-Stack Security Ownership - We don't just monitor; we build. From custom security tooling to comprehensive threat assessment, we own the entire security lifecycle at Render
• Engineering-First Approach - We are a team of engineers that understand security deeply, we create solutions that integrate seamlessly with development workflows rather than creating friction
• Proactive - We stay ahead of threats through continuous assessment, automated monitoring, and rapid response
• By joining Render at an early stage, you will be directly involved with building out foundational security for Render and make decisions that will shape our product and company, directly impacting developers around the globe
• You will build internal tooling to enable secure access to resources (e.g., wrappers, utilities, authentication services, and proxies)
• Implement detection and monitoring systems that alert the team to high signal vulnerabilities
• Analyze and assess security issues identified through threat modeling, penetration testing, security scans and vulnerability disclosure
• Work with developers on sensitive code paths and educate them on secure design patterns
• Liaise with customers regarding their security and compliance needs, and in return, inform our security program
• Communicate security risks and solutions to technical and non-technical stakeholders as part of company-wide planning and prioritization processes
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices and make recommendations for improvements to our security posture
• Partner with product engineering teams to inform and build thoughtful security features for our customers
• Continually ensure that our systems have appropriate authentication, authorization, and accounting with low internal overhead

The application process

• Our interview process is unique to each role, and we value the candidate experience just as much as our customer experience
• We hope your conversations with us reflect a thoughtful process that is illuminative, enjoyable, and respectful of your time

Benefits

• Monthly commuter stipend
• Fully stocked kitchen
• 12 weeks of paid parental leave
• 4 weeks PTO
• 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and all your dependents
• FSAs
• $60 per month for however you prefer to stay in shape
• $100 per month for mental health support
• Traditional or Roth 401(k) plans
• Long-term disability and life insurance
• Equity options
• Continuous learning benefits & related support