Build and contribute to secure-by-default protections across the stack (cloud, CI/CD, applications, and endpoints) by creating paved roads and guardrails that make the secure path the easy path within your problem space
Provide practical security guidance on new products and technologies, recommending secure-by-default patterns that fit into existing workflows
Help secure SeatGeek's use of AI — from LLM-assisted development to AI-powered product features — by building guardrails and reviewing for risks like prompt injection, sensitive-data exposure, and insecure model and tool integrations
Contribute to design reviews and threat modeling for high-impact features and services; surface risks early and help ensure mitigations are designed in
Build security tooling that prevents issues at build/deploy time and helps automate detection and response in production
Improve our detection and incident response capabilities — raise signal quality, tune detections, and implement automated responders that reduce manual toil and time to contain
Partner with engineering and business teams on cross-functional security work: endpoint and device trust, identity and email protections, security awareness and training, vendor reviews and risk assessments, and supporting compliance efforts (e.g., PCI/SOX)
Protect SeatGeek from abuse and bots at the edge and app layers through layered defenses and tuning
Contribute to security incidents and tabletops, including writing incident reviews; help improve runbooks, processes, and stakeholder communications afterward
Advocate for strong secure coding practices and contribute to a pragmatic, positive security culture across your team and partner teams
Requirements
3+ years of broad, hands-on experience across multiple security domains, with strong software engineering fundamentals; track record of driving security projects end-to-end (from design through rollout and adoption)
Proficiency in one or more programming languages (we use Python, Go, and C#); you write production-quality code and perform rigorous reviews for correctness and security
Experience partnering across product, platform, and business functions to contribute to cross-team security outcomes
Ability to build scalable, preventative security solutions across domains (platform/cloud, applications, CI/CD, identity and endpoints), favoring reusable guardrails over one-off fixes
Ability to think like both an attacker and a defender — leveraging each perspective to strengthen the other and drive meaningful improvements in prevention, detection, and response
Familiarity with the security implications of AI/LLM systems — LLM-assisted development, prompt injection, data leakage, and securing model/agent integrations — is a plus
Tech Stack
Cloud
Python
Go
Benefits
Equity stake
Discretionary annual bonus
Flexible work environment, allowing you to work as many days a week in the office as you’d like or 100% remotely
A WFH stipend to support your home office setup
Unlimited PTO
Eligible for the SG discretionary annual bonus based on individual and company performance
Up to 16 weeks of fully-paid family leave
401(k) matching
Student loan matching program
Health, vision, dental, and life insurance
Up to $25k towards family building, reproductive health services and Gender-affirming care
$500 per year for wellness expenses
Subscriptions to Headspace (meditation), Headspace Care (therapy), and One Medical
$360 per quarter to spend on tickets to live events
Annual subscription to Spotify, Apple Music, or Amazon music