Security Engineer
posthog · Remote · Remote (EMEA) · Remote (UK) ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (EU/UK)
- AWS + Wiz
- Build from scratch
- No SOC team
- Async-first culture
Join PostHog as a security generalist responsible for shaping the security culture and tooling from the ground up. You will focus on cloud security, threat detection, and incident response while working closely with product squads to ensure secure design without blocking development speed.
What you'll do
- Triage and tune Wiz alerts to reduce noise and focus on actionable findings
- Lead security incident response and coordinate post-mortems
- Build detection pipelines and improve network-based observability
- Proactively hunt for threats within the AWS environment
- Support the Vulnerability Disclosure Program and triage researcher reports
- Assist product squads with threat modeling and secure design reviews
- Foster a security-positive culture that enables rather than blocks engineers
What you'll need
- 3-5+ years of security engineering experience with heavy AWS focus
- Deep knowledge of IAM, VPC logs, and CloudTrail
- Experience building trusted detection pipelines using CSPM/CNAPP tools
- Proven track record leading incident response under pressure
- Strong engineering skills capable of writing code at product level
- Comfortable building security functions from scratch with high autonomy
- Collaborative mindset focused on enabling safe development practices
Nice to have
- Strong experience in incident management and detection
Stack
- AWS
- Wiz
- Semgrep
How you'll work
- Fully remote position restricted to EU or UK residents
- Natively remote company defaulting to async communication
- Meeting-free Tuesdays and Thursdays for focused building time
- No security committees or excessive bureaucracy
What you get
- High autonomy in choosing work based on impact
- Transparent company handbook and internal data sharing
- Opportunity to shape security culture and tooling from scratch