安全工程师
Security Engineer
### 我们是谁
我们的使命是为世界上最复杂的代码库带来清晰度和控制力。人工智能正在加速代码的创建，但理解、监督和演进这些代码的基础设施却没有跟上步伐。Sourcegraph 为工程组织提供了对其系统全面的可见性，为其代理提供精确的上下文，并能够大规模执行协调的代码更改。随着代理开发成为主导的工程范式，我们为团队提供他们需要的上下文层，以掌控自己的代码库。
通过代码搜索、深度搜索、MCP 和代理批量更改，我们如今实现了这一使命——为工程团队及其 AI 工具提供跨仓库的上下文，使他们能够自信地在庞大的代码库中导航，并能够一次性在数百个仓库中进行更改。
Stripe、Reddit 和 Leidos 等公司依赖 Sourcegraph 来更快、更高质量地交付代码。我们得到了 a16z、Sequoia 和 Redpoint 的支持，自豪地作为一家全球分布式团队运营，重视高自主性、直接沟通和客户关爱。
如果你希望构建让每个工程团队——以及他们部署的每个代理——都能自信操作其代码库的基础设施，请加入我们。
### **工作时间与地点**
🌎 虽然我们在全球几乎所有地方都在招聘，但此职位我们更倾向于有人居住在以下地区。然而，如果你觉得自己符合条件，无论你在哪里我们都欢迎你申请。无论如何，工作时间必须至少有 10 小时/周与 EST 重叠。
**优先地点：**
- 欧洲
### **这份工作的吸引力所在**
作为安全工程师，你将加入我们卓越的[安全团队](https://sourcegraph.notion.site/Security-81d50b5ac5474b07bdbadd5359993c80)，通过参与安全运维、维护和改进我们的监控和警报系统、参与值班并响应安全事件、应用安全测试、漏洞赏金计划以及对应用和基础设施安全进行安全审查，来为我们的产品提供世界级的安全保障。你将主动提升我们代码库、产品、云环境和客户本地部署的安全性。这是一个通才角色，你将主要专注于安全运维，但也将在整个安全计划的各个方面开展工作。
查看英文原文
### Who we are
Our mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase.
With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once.
Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love.
If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us.
### **Hours & location**
🌎 While we hire [almost anywhere](https://sourcegraph.notion.site/How-we-engage-talent-outside-of-the-US-218f7193695a46cbb1ef39ef9c1f72d4) in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with EST for at least 10 hours/week.
**Preferred locations:**
- Europe
### **Why this job is exciting**
As a Security Engineer, you will join our exceptional [security team](https://sourcegraph.notion.site/Security-81d50b5ac5474b07bdbadd5359993c80) tasked with building world-class security into our product offerings by working on security operations, maintaining and improving our monitoring and alerting stack, participating in on-call and responding to security incidents, application security testing, bug bounty programs, and security reviews for both application and infrastructure security. You will proactively improve the security of our codebase, product, cloud, and customers' on-premise deployments. This is a generalist role where you will be primarily focused on Security Operations, but will also work across all facets of a security program.
Within one month, you will…
- Be onboarded to our alerting and monitoring stack
- Be able to participate in on-call rotations
- You will discover, fix, and mitigate infrastructure vulnerabilities by updating libraries, base images, and analyzing containers
Within three months, you will…
- Maintain internal systems, such as automations that assist in alert triaging
- You will work with other teams to triage, troubleshoot, and mitigate customer concerns and questions about our security
- You will enhance our application security with audits, best practices, code fixes, and continuous education
- You will perform reactive incident response if a security event occurs
- You and your manager will work together on a career plan with actionable goals
Within six months, you will…
- You will perform proactive research to detect new attack vectors
- You will perform threat modeling for existing and future applications
- You will assess and integrate new tools and technologies to improve our operational efficiencies
- You will help maintain compliance with SOC 2, ISO 27001 & GDPR standards
### **About you**
Equal parts engineer and security professional, you are excited about joining a team that is building a world-class security system trusted by some of the biggest tech companies in the world. You and your teammates are Sourcegraph’s first line of defense against bad actors using all the newest and dirtiest tricks to hack us and (more importantly) our customers. You want to be a part of the foundational team, the first steps we are taking to build something big, something trusted, something critical to software and our customers
Your skill-set:
- Practical experience reviewing SIEM alerts and participating in on-call rotations
- Practical experience securing SaaS applications as a security generalist, including infrastructure security, application security, and/or compliance
- Experience with Go, including writing and maintaining internal tooling along with code reviews
- Experience with Elastic stack and GCP
- Experience using and automating a wide range of defensive security tools
- Experience working across engineering teams to secure projects across the organization.
- You are high agency
- You communicate effectively in writing and documentation
Nice to haves:
- Experience developing software as an engineer (i.e., writing code and contributing directly to applications)
- Experience working in a startup environment
- Experience with TypeScript and Terraform
- Experience with Kubernetes
- Experience securing AI products
### **Level**
📊 This job is an IC3. You can read more about [our job leveling philosophy](https://www.notion.so/sourcegraph/Leveling-Guide-0e1b5c76ada64b9caac387f8b7c4fc66) in our Handbook.
### **Compensation**
**💸** We pay above-market salaries because we want to hire exceptional people who can focus on building great products, not worrying about paying bills. As an [open and transparent](https://sourcegraph.notion.site/Mission-values-e9d37e6b972a4ef395c3076aea2bd07d) company, our [compensation philosophy](https://app.notion.com/p/sourcegraph/Compensation-Pay-Transparency-at-Sourcegraph-d58d0774f51b4b489d41c3628d30ff8d?pvs=4&assetsVersion=23.13.20260723.1259&clientBuildTarget=client) and pay bands are visible to every Sourcegraph teammate, and we strive to make our approach equitable, explainable, and competitive.
Your base salary is determined by the IC3 pay band for your location zone (1-4). Our pay bands are informed by market data and designed to ensure competitive compensation wherever you live. During the recruiting process, we'll discuss the range applicable to you based on job level, relevant skills, experience, qualifications, and location zone.
**💰** The starting salary for the IC3 pay band in each zone is:
- Zone 2: $144,000 USD
- Zone 3: $108,000 USD
- Zone 4: $72,000 USD
📈 In addition to competitive cash compensation, we offer meaningful equity (because when Sourcegraph succeeds, we want you to succeed, too) and generous [perks & benefits](https://sourcegraph.notion.site/Benefits-Perks-dd1da4b6b3a64780abed010a144d34ba).
### **Interview process**
_Below is the interview process you can expect for this role (you can read more about_ [_the types of interviews_](https://sourcegraph.notion.site/Types-of-interviews-f279f080583d49ee9f2c60e30c8cb1f7) _in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all!_
We expect the interview process to take <5 hours in total.
**👋 Introduction Stage** - we have initial conversations to get to know you better…
- [20m] [Recruiter Screen](https://www.notion.so/sourcegraph/Types-of-interviews-sample-questions-f279f080583d49ee9f2c60e30c8cb1f7?pvs=4#99be5ff628b2414194a0ba79d9f25f13)
- [45m] [Hiring Manager Screen](https://www.notion.so/sourcegraph/Types-of-interviews-sample-questions-f279f080583d49ee9f2c60e30c8cb1f7?pvs=4#1919882c0cf147c487eb1df40db8a694) / [Resume Deep Dive](https://www.notion.so/sourcegraph/Types-of-interviews-sample-questions-f279f080583d49ee9f2c60e30c8cb1f7?pvs=4#c678a2a86e0e47e4958507e869bf7ded)
**🧑💻 Team Interview Stage** - we then delve into your experience in more depth and introduce you to members of the team, including cross-functional partners…
- [60m] Technical Interview: General
- [60m] Technical Interview: Complex Problem Deep Dive
- [45m] Cross-functional Team Collaboration / Values
**🎉 Final Interview Stage**- we move you to our final round, where you gain a better understanding of our business and values holistically…
- [15m] [Leadership](https://www.notion.so/sourcegraph/How-to-work-with-Quinn-Slack-CEO-807673e0864d473f959cc4efd9642a5a?pvs=4#6f185c0e2011411eac5be9c675f9056c)
- We check references and conduct your background check
Please note - you are welcome to request additional conversations with anyone you would like to meet, but didn’t get to meet during the interview process.
### Learn more about us
You can learn more about what it is like to work at Sourcegraph by reading [our handbook](https://sourcegraph.notion.site/d7614e3e9dc04c09ac2d42d57f1816e6?v=2a6d426dbae14390b155120b0c029ce0).
We are an ambitious team who are collectively working hard to build the most influential company in the world. You can read more about our [culture](https://sourcegraph.notion.site/What-it-s-like-working-at-Sourcegraph-119a8e11265880b18911eee4d9b7c460#119a8e1126588062b935fc66104b6115), [competitive compensation](https://sourcegraph.notion.site/Compensation-Pay-Transparency-at-Sourcegraph-d58d0774f51b4b489d41c3628d30ff8d?pvs=74) and [benefits](https://sourcegraph.notion.site/Benefits-Perks-dd1da4b6b3a64780abed010a144d34ba?pvs=74) here.
Sourcegraph is an equal opportunity workplace; we welcome people from all backgrounds.
_Sourcegraph participates in_ [_E-Verify_](https://sourcegraph.notion.site/E-Verify-2ab3286dde3446d6bac2898c83610107) _for U.S. Employees._