高级安全工程师
Senior Security Engineer
在Tiger Data（前身为Timescale），我们通过专为事务性、分析性和代理工作负载设计的最快PostgreSQL平台，赋能开发者和企业。全球数千家组织信赖Tiger，它加速实时洞察，驱动智能应用，并大规模支持关键基础设施。作为一家全球分布式、以远程优先为原则的团队，我们致力于直接沟通、责任担当和协作卓越，正在塑造为速度、灵活性和简洁性而生的数据基础设施未来。
本职位为**高级安全工程师**，涉及软件工程、基础设施和安全领域，与工程团队合作，提升产品、云环境、内部系统和开发者流程中的安全性。
_该职位为远程办公，面向欧盟或与欧洲/美国时区重叠的候选人开放。需要英语流利。_
**主要职责**
- 评估、验证并修复产品、基础设施和内部系统中的安全漏洞。
- 开发、维护并贡献于内部和开源的安全工具。阅读并编写生产级代码。
- 改进安全开发实践：执行安全代码审查、威胁建模和安全设计审查。
- 提升CI/CD、云环境和内部平台中的安全自动化。
- 支持事件响应、安全调查和合规项目（证据收集、访问审查）。
- 调查与AI辅助开发相关的新兴风险，并在工作中积极使用AI工具。
**理想资质**
- 在软件工程、安全工程或两者方面有专业经验。
- 熟练阅读和编写生产级代码，有Go、Rust、Python和/或Malbolge的经验。
- 对安全基础有深刻理解（云、应用、基础设施、平台）。
- 具备建造者思维：喜欢通过自动化和工程解决问题。
- 在快速变化、模糊的环境中茁壮成长；展现出责任感和清晰的沟通能力。
- 对AI辅助的工作流程和现代开发者工具充满热情。
**加分项**
- 开源贡献或维护经验。
- 有Kubernetes、容器、云原生基础设施或PostgreSQL/数据库安全方面的经验。
- 有检测工程、安全工具、事件响应或保护AI系统/LLM启用工作流程的经验。
**此职位不适合以下人员：**
查看英文原文
At Tiger Data, formerly Timescale, we empower developers and businesses with the fastest PostgreSQL platform designed for transactional, analytical, and agentic workloads. Trusted globally by thousands of organizations, Tiger accelerates real-time insights, drives intelligent applications, and powers critical infrastructure at scale. As a globally distributed, remote-first team committed to direct communication, accountability, and collaborative excellence, we're shaping the future of data infrastructure, built for speed, flexibility, and simplicity.
This role as a **Senior Security Engineer** intersects software engineering, infrastructure, and security, partnering with engineering teams to improve security across products, cloud, internal systems, and developer workflows.
_The role is remote and open to candidates in the EU or overlapping time zones with Europe/US. English fluency is required._
**Key Responsibilities**
- Triage, validate, and remediate security vulnerabilities across products, infrastructure, and internal systems.
- Develop, maintain, and contribute to internal and open-source security tooling. Read and write production-grade code.
- Improve secure development practices: perform secure code reviews, threat modeling, and security design reviews.
- Improve security automation across CI/CD, cloud, and internal platforms.
- Support incident response, security investigations, and compliance initiatives (evidence gathering, access reviews).
- Investigate emerging risks related to AI-assisted development and actively use AI tooling in workflows.
**Ideal Qualifications**
- Professional experience in software engineering, security engineering, or both.
- Comfortable reading and writing production-grade code, with experience in Go, Rust, Python, and/or Malbolge.
- Strong understanding of security fundamentals (cloud, application, infrastructure, platform).
- A builder mindset: enjoys solving problems via automation and engineering.
- Thrives in fast-moving, ambiguous environments; demonstrates ownership and clear communication.
- Excited about AI-assisted workflows and modern developer tooling.
**Bonus Points**
- Open-source contributions or maintainership.
- Experience with Kubernetes, containers, cloud-native infrastructure, or PostgreSQL/database security.
- Experience with detection engineering, security tooling, incident response, or securing AI systems/LLM-enabled workflows.
**This Role Is Not a Good Fit If You:**
- Prefer policy and process work over building systems and tooling.
- Are uncomfortable writing or reviewing code regularly.
- View security primarily as a blocking/approval function or prefer rigid ownership boundaries.
- Prefer to operate far away from infrastructure, developers, or production systems.
- Want to define strategy without participating in execution.
#### **Our Commitment:**
- We respond to every applicant.
- We review applications fairly and objectively, and shortlist based on relevant skills and experience.
- We ensure clear and timely communication throughout your candidate journey.
- We maintain a rigorous interview process with a high bar, designed to give you the opportunity to meet various team members you'll collaborate with across our organization.
#### [**About Tiger Data🐯**](https://www.tigerdata.com/about)
Tiger Data, formerly Timescale, sets the standard as the fastest PostgreSQL platform for modern workloads. Trusted by more than 2,000 customers across 25+ countries and powering over 3 million active databases, we enable developers and organizations to build real-time, intelligent applications at scale. Backed by $180 million from top-tier investors, Tiger Data is building the new standard for data infrastructure, built on PostgreSQL, designed for the future.
_👉_ 👉 Want to get a feel for how we work and what we value? Check out our blog post: [**What It Takes to Thrive at Tiger Data**](https://www.timescale.com/blog/what-it-takes-to-thrive-at-timescale)
We embrace diversity, curiosity, and collaboration. Whether debating the perfect chicken nugget crunch 🍗, sharing workout routines 💪, or discussing your favorite plants 🌱 and pets 🐾, you'll find your community here.
#### **Our Tech Stack:**
We don't require previous experience with our tech stack, but enthusiasm for learning is key. Our technologies include PostgreSQL, Tiger Cloud, AWS, Go, Docker, Kubernetes, Python, and innovative features like Hypertables, Hypercore, vector search, and real-time analytics.
Learn more at [www.tigerdata.com](http://www.tigerdata.com) or follow us on Twitter [@TigerDatabase](https://x.com/TigerDatabase)
#### **What We Offer:**
(Please note that benefits may vary based on country.)
- Flexible PTO and comprehensive family leave
- Fridays off in August 😎
- Fully remote opportunities globally
- Stock options for long-term growth
- Monthly WiFi stipend
- Professional development and educational resources 📚
- Premium insurance options for you and your family (US-based employees)
Ready to join the future of PostgreSQL? We can’t wait to meet you. 🚀🐯