Senior Software Engineer, Security

<h3><strong>SeatGeek believes live events are powerful experiences that unite humans. With our technological savvy and fan-first attitude we’re simplifying and modernizing the </strong><strong>ticketing industry.</strong></h3> <p>SeatGeek is looking for a security engineering professional for our Security team. As a Senior Software Engineer, Security, you’ll be involved in a mix of security engineering, product security, incident response, and a trace of red teaming.</p> <p>You’ll be involved with critical security initiatives that strengthen our secure-by-default posture across our platform, products, and company. You’ll pair architectural guidance with hands-on engineering — building paved roads, tooling, and automated detection/response that scale. You’ll operate in a fast-paced, collaborative environment, partnering with both engineering and non-engineering teams to reduce risk without slowing builders down. As a senior engineer, you'll own meaningful work end-to-end and help make the secure path the easy path — from cloud and code to laptops, identity, email, and awareness — including the AI tools reshaping how we build.</p> <p>If this role sounds interesting to you, we encourage you to apply even if your experience doesn’t match every requirement - we value curiosity, collaboration, and a willingness to learn!</p> <h3><strong>What you'll do</strong></h3> <ul> <li>Build and contribute to secure-by-default protections across the stack (cloud, CI/CD, applications, and endpoints) by creating paved roads and guardrails that make the secure path the easy path within your problem space</li> <li>Provide practical security guidance on new products and technologies, recommending secure-by-default patterns that fit into existing workflows</li> <li>Help secure SeatGeek's use of AI — from LLM-assisted development to AI-powered product features — by building guardrails and reviewing for risks like prompt injection, sensitive-data exposure, and insecure model and tool integrations</li> <li>Contribute to design reviews and threat modeling for high-impact features and services; surface risks early and help ensure mitigations are designed in</li> <li>Build security tooling that prevents issues at build/deploy time and helps automate detection and response in production</li> <li>Improve our detection and incident response capabilities — raise signal quality, tune detections, and implement automated responders that reduce manual toil and time to contain</li> <li>Partner with engineering and business teams on cross-functional security work: endpoint and device trust, identity and email protections, security awareness and training, vendor reviews and risk assessments, and supporting compliance efforts (e.g., PCI/SOX)</li> <li>Protect SeatGeek from abuse and bots at the edge and app layers through layered defenses and tuning</li> <li>Contribute to security incidents and tabletops, including writing incident reviews; help improve runbooks, processes, and stakeholder communications afterward</li> <li>Advocate for strong secure coding practices and contribute to a pragmatic, positive security culture across your team and partner teams</li> </ul> <h3><strong>What you have</strong></h3> <ul> <li>3+ years of broad, hands-on experience across multiple security domains, with strong software engineering fundamentals; track record of driving security projects end-to-end (from design through rollout and adoption)</li> <li>Proficiency in one or more programming languages (we use Python, Go, and C#); you write production-quality code and perform rigorous reviews for correctness and security</li> <li>Experience partnering across product, platform, and business functions to contribute to cross-team security outcomes</li> <li>Ability to build scalable, preventative security solutions across domains (platform/cloud, applications, CI/CD, identity and endpoints), favoring reusable guardrails over one-off fixes</li> <li>Ability to think like both an attacker and a defender — leveraging each perspective to strengthen the other and drive meaningful improvements in prevention, detection, and response</li> <li>Familiarity with the security implications of AI/LLM systems — LLM-assisted development, prompt injection, data leakage, and securing model/agent integrations — is a plus</li> </ul> <h3><strong>Our stack</strong></h3> <p>You do not need experience with all of these, but we thought you might be curious. What we care about is your experience, skills, and approach to problem solving. Tools can be learned.</p> <ul> <li><strong>Central Logging and Monitoring:</strong> Datadog</li> <li><strong>Cloud Platform:</strong> AWS</li> <li><strong>Code Versioning:</strong> GitLab</li> <li><strong>Container Orchestration:</strong> Kubernetes</li> <li><strong>Dashboarding: </strong>Hex and Looker</li> <li><strong>Data Warehouse:</strong> Redshift</li> <li><strong>Endpoint Detection and Response:</strong> CrowdStrike</li> <li><strong>Languages:</strong> C#, Go, Python, SQL, and Terraform</li> </ul> <h3><strong>Perks</strong></h3> <ul> <li>Equity stake</li> <li>Discretionary annual bonus</li> <li>Flexible work environment, allowing you to work as many days a week in the office as you’d like or 100% remotely</li> <li>A WFH stipend to support your home office setup</li> <li>Unlimited PTO</li> <li>Eligible for the SG discretionary annual bonus based on individual and company performance</li> <li>Up to 16 weeks of fully-paid family leave&nbsp;</li> <li>401(k) matching&nbsp;</li> <li>Student loan matching program</li> <li>Health, vision, dental, and life insurance</li> <li>Up to $25k towards family building, reproductive health services and Gender-affirming care</li> <li>$500 per year for wellness expenses</li> <li>Subscriptions to Headspace (meditation), Headspace Care (therapy), and One Medical</li> <li>$360 per quarter to spend on tickets to live events</li> <li>Annual subscription to Spotify, Apple Music, or Amazon music</li> </ul> <p>&nbsp;</p> <hr> <p><em>The salary range for this role is $144,000 - $209,000 USD. This role is equity eligible. In addition, you may receive a discretionary annual bonus based on individual and company performance. Actual compensation packages within that range are based on a wide array of factors unique to each candidate, including but not limited to skill set, years and depth of experience, certifications, and specific location.</em></p> <p><em>SeatGeek is committed to providing equal employment opportunities to all employees and applicants for employment regardless of race, color, religion, creed, age, national origin or ancestry, ethnicity, sex, sexual orientation, gender identity or expression, disability, military or veteran status, or any other category protected by federal, state, or local law. As an equal opportunities employer, we recognize that diversity is a positive attribute and we welcome the differences and benefits that a diverse culture brings. Come join us!</em></p> <p>To review our candidate privacy notice,&nbsp;<a class="c-link c-link--focus-visible" href="https://seatgeek.com/privacy/USApplicantNotice" target="_blank" data-stringify-link="https://seatgeek.com/privacy/USApplicantNotice" data-sk="tooltip_parent">click here.</a></p> <h6><strong><em>#LI-Remote</em></strong></h6>