Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “Mountain View (HQ) or Remote”
Apply on Matx's site ↗
Opens the employer's official application page.
Generate a CV for this job
Generate my CV
A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.
About this role
Matx is hiring for a Security Engineer role (full-time). See the official posting for full details.
Requirements
- 8+ years in security engineering, with real depth in at least two of the following and working competence across the rest: application and product security, offensive security, cloud infrastructure security, supply chai…
- Strong application security fundamentals: threat modeling, manual secure code review, common vulnerability classes and their mitigations, and experience running SAST, DAST, and SCA tooling against real applications, ser…
- Hands-on offensive experience - penetration testing, red team engagements, or vulnerability research - with current-day fluency in application and cloud attack paths, and the judgment to know when an attacker's perspect…
- Strong software engineering skills. You write and ship production-quality code (Go, Python, Rust, or similar) and are comfortable reading code in languages you don't write. You've built tools other engineers chose to use
- Working knowledge of at least one major cloud provider (GCP, AWS, or Azure) - IAM models, network architecture, secrets management, logging - and the appetite to go deep on the parts you haven't owned yet
- Familiarity with modern supply chain and build integrity concepts - artifact signing, provenance and attestation, SBOMs, CI/CD as an attack surface - and the interest to own that program end to end. We care more that yo…
- A track record of shipping fixes with development teams rather than filing tickets at them. You've been the security person engineers actually wanted in the room
- Comfort operating with ambiguity and breadth. You can prioritize the small number of things that actually reduce risk, say no to the rest, and explain both decisions to engineers and to leadership
Summarized from the employer's posting — check the full posting for every requirement.
New remote jobs for your state, by email.
A short digest only when there's something new. Confirm by email, unsubscribe anytime.