Software Engineer, Security (all levels)

The Render Security team is a small, dedicated team of engineers that runs all things security at Render.

- Full-Stack Security Ownership - We don't just monitor; we build. From custom security tooling to comprehensive threat assessment, we own the entire security lifecycle at Render.

- Engineering-First Approach - We are a team of engineers that understand security deeply, we create solutions that integrate seamlessly with development workflows rather than creating friction.

- Proactive - We stay ahead of threats through continuous assessment, automated monitoring, and rapid response.

By joining Render at an early stage, you will be directly involved with building out foundational security for Render and make decisions that will shape our product and company, directly impacting developers around the globe.

- Build internal tooling to enable secure access to resources (e.g., wrappers, utilities, authentication services, and proxies).

- Implement detection and monitoring systems that alert the team to high signal vulnerabilities

- Analyze and assess security issues identified through threat modeling, penetration testing, security scans and vulnerability disclosure.

- Work with developers on sensitive code paths and educate them on secure design patterns.

- Liaise with customers regarding their security and compliance needs, and in return, inform our security program.

- Communicate security risks and solutions to technical and non-technical stakeholders as part of company-wide planning and prioritization processes.

- Stay up-to-date with the latest security threats, vulnerabilities, and best practices and make recommendations for improvements to our security posture.

- Partner with product engineering teams to inform and build thoughtful security features for our customers.

- Continually ensure that our systems have appropriate authentication, authorization, and accounting with low internal overhead.

- 6+ years of professional experience in software engineering or security.

- Experience designing and building secure web applications, tools, and APIs.

- Strong sense of ownership and ability to make pragmatic decisions about your work.

- Detection engineering experience through implementation and maintenance of a SIEM.

- Experience with any of the technologies the Render product runs on: Go, Typescript, Kubernetes, Postgres, Terraform, Temporal.

- Experience with compliance frameworks such as SOC 2, ISO 27001, HIPAA or PCI.

- Proven expertise in exploiting common security vulnerabilities, demonstrating practical experience in identifying and leveraging vulnerabilities to assess security posture.

- Experience securing applications and systems through threat modelling and risk assessments.

- Active participation and contributions to the security community through public research, blogging, presentations, and other means.