Senior Security Engineer, Vulnerability Management, PSIRT

About the role

The Senior Security Engineer will lead and mature 1Password's incident response capabilities, working closely with Engineering, Legal, Communications, and Customer Success to coordinate the company's response when product security incidents occur.

Responsibilities

• Lead end-to-end response to product security incidents, from discovery, triage, remediation, and disclosure.
• Own and evolve 1Password's PSIRT function, including incident classification frameworks, severity models, escalation paths, and response playbooks.
• Drive coordinated vulnerability disclosure (CVD) processes, partnering with our bug bounty program and external security researchers to manage responsible disclosure timelines and communications.
• Serve as the primary coordinator across Product Security, Engineering, Legal, Communications, and Customer Success during active security incidents.
• Lead post-incident reviews (PIRs) and translate findings into systemic improvements across our products, processes, and detection capabilities.
• Develop and maintain incident response tooling, automation, and reporting that reduce time-to-detect and time-to-respond.
• Contribute to customer-facing security advisories, CVE disclosures, and public incident communications in partnership with Legal and Communications.
• Mentor other engineers and help shape the long-term maturity of our product security and incident response capabilities.
• Serve on an on-call rotation with out-of-business-hours coverage.

Requirements

• 5+ years of career experience in IT or Engineering with a security focus.
• Hands-on experience leading or participating in security incident response, ideally in a product or SaaS company context.
• Strong judgment under pressure: you make clear, defensible decisions during time-sensitive situations with incomplete information.
• Experience building or formalizing incident response capabilities from the ground up (playbooks, runbooks, severity frameworks, escalation processes).
• Experience drafting or contributing to customer security advisories, CVEs, or public-facing incident communications.
• Strong communication skills across a wide range of audiences, from engineers to executives to customers.
• Comfort reading and writing code to support forensic analysis, automation, and tooling.
• Adaptable and resilient: you thrive in fast-paced environments where priorities can shift quickly.

Skills

• Experience leveraging AI/ML capabilities to accelerate security workflows, automate repetitive tasks, or improve detection and response.

Benefits

• Immediate participation in 1Password's benefits program (health, dental, 401k and many others).
• Utilization of our generous paid time off.
• An equity grant.
• Where applicable, participation in our incentive programs.

Pay

• USA-based roles: Annual base salary between $153,000 USD and $214,000 USD.
• Canada-based roles: Annual base salary between $144,000 CAD and $202,000 CAD.

Schedule

• This is a remote opportunity within Canada and the US.