Senior / Staff Security Engineer

Remote · 5+ years experience · Full-time · Remote · Posted Oct 15, 2026

At a glance

Linear is seeking a Senior or Staff Security Engineer to join their remote-first team to help scale their security program as the company grows into the enterprise market.
This is a high-autonomy, hands-on role focused on vulnerability management, product security testing, incident response, and cloud infrastructure hardening.
The role involves building security tooling and automation to ensure the program scales effectively alongside the product development system.

Operate, automate, and extend vulnerability management end-to-end across product, infrastructure, and dependencies.
Manage the bug bounty program, including triaging reports, validating severity, and coordinating fixes.
Lead product security testing, including threat modeling new features and performing manual and tool-assisted security reviews.
Serve as a primary responder for security incidents, leading investigation, containment, and postmortems.
Harden cloud and infrastructure configurations on GCP, Kubernetes, and Postgres.
Build and maintain security tooling and automation, leveraging AI/LLM tools to improve triage and investigation efficiency.
Partner with the GRC/Trust function to integrate findings into risk registers and compliance evidence.

5+ years of experience across security engineering.
Demonstrated depth in at least two of the following: vulnerability management, product/appsec testing, incident response, or cloud security.
Ability to read and reason about code, specifically TypeScript.
Experience working in cloud environments.
Ability to lead incident response from alert through postmortem.
Strong communication skills for explaining technical findings to non-technical stakeholders.
Comfortable working with high autonomy and setting own priorities.

Competitive salary and equity
Employee-friendly equity terms including early exercise in the US and extended exercise windows
Daily meal and coffee stipend
Paid co-working space or desk
Health coverage
5 weeks paid vacation
4 months paid parental leave
Paid month off after 4 years & every 2 years thereafter
Regular team events and off-sites

Remote-first company.
Role is open to candidates based in North America.
Includes intentional in-person team off-sites, optional co-working, and occasional travel.