Staff Security Engineer

About the role

We’re looking for a Staff Security Engineer to set technical direction and lead hands-on security work across CodeRabbit’s products, cloud infrastructure, identities, and AI systems. You’ll think like an attacker, build practical defenses, and partner with engineering, platform, and IT teams to reduce risk as we scale.

What you'll do

• Define and drive the technical security roadmap with engineering leaders, prioritizing work by customer impact, threat exposure
• Lead threat modeling and security architecture reviews for products, infrastructure, and major design changes. Build reusable patterns, guardrails
• Improve cloud security across GCP, GKE/Kubernetes, and serverless workloads, covering network isolation, workload identity, secrets management
• Lead identity and access management improvements for people, services, and automation: least privilege, SSO/MFA, privileged and time-bound access, service accounts
• Build and operate security detection capabilities using cloud audit logs, identity events, application telemetry, and endpoint signals. Develop and test SIEM detections

What you need

• 8–14 years in cybersecurity
• SIEM
• Incident response
• Vulnerability assessment
• IAM
• Cloud security
• Python
• Any graduate

Good to have

• OWASP
• ISO 27001
• LLMs
• Machine learning
• GCP
• CI/CD

What you get