Staff Defensive Security Software Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Defensive Security Software Engineer based in the United States.

This role offers the opportunity to build advanced cybersecurity capabilities that help organizations detect, understand, and respond to evolving threats. As a Staff Defensive Security Software Engineer, you will combine security expertise and software engineering skills to develop innovative defensive technologies. You will contribute to threat detection, deception capabilities, and security products designed to improve customer resilience. The position requires strong technical leadership, hands-on development experience, and the ability to solve complex security challenges. You will collaborate with product, engineering, and security teams to transform ideas into scalable production solutions. This is an ideal opportunity for a security-focused engineer who enjoys creating impactful products in a fast-moving, remote-first environment.

Accountabilities: The Staff Defensive Security Software Engineer will lead the technical development of advanced security capabilities, combining research, engineering, and product thinking to deliver effective defensive solutions. The role requires ownership of technical direction, strong collaboration skills, and the ability to build secure, scalable software.

Own the technical vision and execution strategy for security-focused workstreams from concept through production delivery.

Design, prototype, and develop defensive security features including deception technologies, threat detection capabilities, and response mechanisms.

Build and maintain production-quality software using modern backend languages such as Python, Go, Rust, or similar technologies.

Develop security solutions involving honeytokens, honeypots, detection logic, and related defensive capabilities.

Partner with product managers, designers, and engineers to translate customer needs and security challenges into technical solutions.

Lead technical design discussions, code reviews, architecture decisions, and secure development practices.

Create technical documentation and communicate complex security concepts clearly to technical and non-technical stakeholders.

Mentor engineers, establish strong engineering practices, and help teams improve quality, architecture, and operational discipline.

Translate ambiguous product goals into actionable technical roadmaps and scalable solutions.

Identify risks, trade-offs, and opportunities while maintaining focus on business and customer impact.

Requirements:

The ideal candidate will have deep expertise in cybersecurity engineering, software development, and threat-focused technologies. Success in this role requires strong technical leadership, hands-on coding ability, and experience building solutions that address complex security challenges.

Bachelor’s degree in Computer Science, Computer Engineering, or a related technical field, or equivalent demonstrated experience.

Expert-level proficiency in large-scale Python software development.

Minimum of 4 years of experience building offensive or defensive security solutions, preferably in threat detection, endpoint security, low-level systems, or related areas.

Strong understanding of network security concepts, including reconnaissance, lateral movement, and exploitation techniques.

Experience with Windows internals, Active Directory, and Windows authentication mechanisms.

Strong knowledge of network protocols such as SMB and WMI and their security implications.

Experience working with relational databases such as PostgreSQL or graph databases such as Neo4j.

Proven experience contributing production code at a senior technical level in service-oriented environments.

Strong technical design skills with experience building secure, scalable software architectures.

Ability to work independently, take ownership, and operate effectively in a remote environment.

Strong written and verbal communication skills with the ability to influence cross-functional teams.

Experience with red teaming, penetration testing, incident response, detection engineering, or deception technologies is preferred.

Familiarity with Docker, containerization, cloud environments, Active Directory, Entra ID, Okta, Azure Service Principals, or AWS IAM is a plus.

Security certifications such as OSCP, GCWN, or equivalent are preferred.

Benefits:

The role offers a competitive compensation package, flexible remote work environment, and opportunities to contribute to innovative cybersecurity solutions.

Competitive base salary range of $240,000–$270,000 USD annually, depending on location, experience, and qualifications.

Potential equity package through stock options.

Fully remote work environment across the United States.

Comprehensive health, vision, and dental insurance coverage for employees and families.

Flexible vacation policy.

Generous parental leave benefits.

Career development opportunities within a growing cybersecurity organization.

Collaborative and inclusive culture focused on innovation and technical excellence.

Opportunity to work on advanced security technologies with meaningful real-world impact.

Up to 5% travel may be required depending on business needs.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1