Remote Jobs Now
Linear

Senior / Staff Security Engineer

Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “North America”
Apply on Linear's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

Linear is hiring for a Senior / Staff Security Engineer role (full-time). See the official posting for full details.

Requirements

  • Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretic…
  • Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive
  • Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying s…
  • Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work
  • Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults
  • Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth
  • Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice
  • A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security). We need b…

Summarized from the employer's posting — check the full posting for every requirement.