Senior Software Engineer, Security

About the role

SeatGeek is seeking a Senior Software Engineer, Security to join our Security team. This role involves security engineering, product security, incident response, and red teaming. You will work on critical security initiatives to strengthen our secure-by-default posture across the platform, products, and company. You will work closely with both engineering and non-engineering teams to reduce risk without slowing builders down.

Responsibilities

• Build and contribute to secure-by-default protections across the stack (cloud, CI/CD, applications, and endpoints)
• Provide practical security guidance on new products and technologies, recommending secure-by-default patterns that fit into existing workflows
• Contribute to design reviews and threat modeling for high-impact features and services; surface risks early and help ensure mitigations are designed in
• Build security tooling that prevents issues at build/deploy time and helps automate detection and response in production
• Improve our detection and incident response capabilities — raise signal quality, tune detections, and implement automated responders that reduce manual toil and time to contain
• Partner with engineering and business teams on cross-functional security work: endpoint and device trust, identity and email protections, security awareness and training, vendor reviews and risk assessments, and supporting compliance efforts (e.g., PCI/SOX)
• Protect SeatGeek from abuse and bots at the edge and app layers through layered defenses and tuning
• Contribute to security incidents and tabletops, including writing incident reviews; help improve runbooks, processes, and stakeholder communications afterward
• Advocate for strong secure coding practices and contribute to a pragmatic, positive security culture across your team and partner teams

Requirements

• 3+ years of broad, hands-on experience across multiple security domains, with strong software engineering fundamentals; track record of driving security projects end-to-end (from design through rollout and adoption)
• Proficiency in one or more programming languages (we use Python, Go, and C#); you write production-quality code and perform rigorous reviews for correctness and security
• Ability to build scalable, preventative security solutions across domains (platform/cloud, applications, CI/CD, identity and endpoints), favoring reusable guardrails over one-off fixes
• Ability to think like both an attacker and a defender — leveraging each perspective to strengthen the other and drive meaningful improvements in prevention, detection, and response
• Familiarity with the security implications of AI/LLM systems — LLM-assisted development, prompt injection, data leakage, and securing model/agent integrations — is a plus

Qualifications

• Experience partnering across product, platform, and business functions to contribute to cross-team security outcomes
• Experience with central logging and monitoring (Datadog), cloud platforms (AWS), container orchestration (Kubernetes), dashboarding (Hex and Looker), data warehouse (Redshift), endpoint detection and response (CrowdStrike), and languages (C#, Go, Python, SQL, and Terraform)

Skills

• Strong communication and collaboration skills
• Experience with security tools and frameworks
• Knowledge of security best practices and standards
• Ability to work independently and as part of a team

Benefits

• Equity stake
• Discretionary annual bonus
• Flexible work environment
• WFH stipend
• Unlimited PTO
• 401(k) matching
• Student loan matching program
• Health, vision, dental, and life insurance
• Family leave
• Perks such as subscriptions to meditation, therapy, and healthcare services
• Tickets to live events
• Annual subscription to music streaming services

Pay

The salary range for this role is $144,000 - $209,000 USD. This role is equity eligible. In addition, you may receive a discretionary annual bonus based on individual and company performance. Actual compensation packages within that range are based on a wide array of factors unique to each candidate, including but not limited to skill set, years and depth of experience, certifications, and specific location.