Security Engineer

PostHog develops autonomous product development tools including open-source product analytics and AI-powered analyst tools. The company is product-led with over 450,000 installations, is well-funded with over $180m raised, and emphasizes transparency, autonomy, and fast shipping in a remote work environment.

• 3-5+ years of security engineering experience focused on AWS, including expertise with IAM, VPC logs, and CloudTrail.
• Experience with CSPM/CNAPP tools like Wiz or Prisma and building trusted detection pipelines.
• Proven incident response leadership with the ability to coordinate cross-team threat containment.
• Ability to operate autonomously in building security operations from scratch without a manual.
• Strong engineering skills, including writing code to understand and mitigate vulnerabilities.
• Effective communication and a collaborative attitude focused on enabling engineers rather than limiting them.

• Build and shape the security team, culture, and tooling from scratch.
• Own and tune Wiz alerts to reduce noise and focus on actionable findings.
• Lead incident detection and response, coordinate team responses, and develop incident response runbooks.
• Build detection pipelines and close network observability gaps to trace suspicious activities.
• Proactively hunt threats in the AWS environment by defining and proving telemetry standards.
• Support the Vulnerability Disclosure Program and transition towards a formal bug bounty program.
• Enable product teams with threat modeling and secure design reviews.
• Foster and maintain a positive security culture that enables engineers.

This position is open to candidates located in the EU or UK.