Design, build, and operate a world-class real-time streaming cloud platform

We are building Redpanda, a real-time streaming engine for modern applications. Redpanda is used by Fortune 1000 enterprises pushing hundreds of terabytes a day, and by the solo dev prototyping a React application on her laptop. We go beyond the Kafka protocol into the future of streaming, with onboard WASM transforms and geo-replicated hierarchical storage. Think of it as a data API platform that scales with you from the smallest projects to petabytes of data distributed across the globe. We are on a mission to enable every developer to supercharge their real-time applications.

You Will

Be part of the response team for security incidents
Work with our wider engineering organization to implement DevSecOps practices for observability, testing, auditing and compliance
Keep up-to-date with security developments and trends, to continually improve security at Redpanda
Perform internal penetration tests and vulnerability assessments
Define cloud security policies and implement tooling for identifying violations and enforcing policies

You Have

3+ years in an information security role, with an emphasis on cloud
Worked with distributed teams and believe in open collaboration
Proven experience doing penetration testing and vulnerability assessment
Participated in compliance programs like SOC2, PCI, FedRAMP or others
Experience building security with an engineering mindset, focusing on automation and simplicity
An understanding of “defense-in-depth” and know how to apply it
Excellent written communication skills

Nice to have

Experience with application security, specifically around Go and C++
Have implemented enterprise security training
Published vulnerabilities or other information security papers
Experience doing penetration testing and application fuzzing