安全工程师
Security Engineer
Patreon 是一个媒体和社区平台，目前有超过 30 万创作者为他们的核心粉丝提供独家作品和体验。我们为创作者提供了多种与粉丝互动并建立持久业务的方式，包括：付费会员、免费会员、社区聊天、直播视频，以及通过一次性购买直接向粉丝销售产品。
我们最终的目标很简单：资助创意阶层。我们在该领域处于领先地位，具体表现为：
- 自 Patreon 成立以来，创作者已产生超过 100 亿美元的收入
- 有超过 1 亿个免费会员，这些粉丝可能尚未准备好付费
- 目前有超过 2500 万个付费会员在 Patreon 上
我们正在大力投资打造最好的创作者平台，并组建了最好的创作者经济团队，现正寻找一名安全工程师来支持我们的使命。
该职位为全远程办公（仅限美国），或可设在纽约或旧金山（采用混合办公模式，每周需到办公室工作 3 天）。
关于团队
Patreon 的安全团队致力于保护 Patreon 的创作者及其粉丝。团队负责 Patreon 安全的各个方面，包括应用安全、基础设施安全以及内部/企业安全。我们是一个小而高效的团队。我们编写代码来解决安全问题，并与工程组织中的其他合作伙伴紧密合作。我们还理解在安全风险与业务需求之间取得平衡的重要性。我们追求诚实有效的沟通，并专注于务实降低风险，而不是仅仅完成流程。安全团队是 Patreon 风险工程部门的一部分，该部门还包括我们的安全工程和身份与访问管理团队。整体风险部门处理各种问题，包括内容审核、内部工具、身份验证、访问控制和账户安全。
关于职位
在这个职位上，你将成为我们的安全团队成员。你将把时间分配在参与安全项目和响应安全调查、漏洞或问题上。工作涵盖应用安全、基础设施安全和内部/企业安全。它包括主动和被动的安全工作。你将参与轮班值班，并协助响应安全事件和调查。你将编写代码——既用于支持安全工作，也用于提升 Patreon 平台的安全性。你将与其他安全团队成员密切合作。
查看英文原文
Patreon is a media and community platform where over 300,000 creators give their biggest fans access to exclusive work and experiences. We offer creators a variety of ways to engage with their fans and build a lasting business including: paid memberships, free memberships, community chats, live video, and selling to fans directly with one-time purchases.
Ultimately our goal is simple: fund the creative class. And we're leaders in that space, with:
- $10 billion+ generated by creators since Patreon's inception
- 100 million+ free memberships for fans who may not be ready to pay just yet, and
- 25 million+ paid memberships on Patreon today.
We're continuing to invest heavily in building the best creator platform with the best team in the creator economy and are looking for a Security Engineer to support our mission.
This role is Fully Remote (US only), or can be based in New York or San Francisco (where it is open to those who are able to be in-office 3 days per week on a hybrid work model.)
About the Team
Patreon’s security team works to protect Patreon creators and their fans. The team deals with all facets of Patreon’s security, including application security, infrastructure security, and internal/corporate security. We’re a small but effective team. We write code to solve security problems and work closely with our partners across the engineering organization. We also understand the importance of balancing security risks against business needs. We strive for honest and effective communication and focus on pragmatically reducing risk over checking boxes. The security team is part of Patreon’s Risk Engineering org, which also includes our Safety Engineering and Identity and Access teams. Collectively, the risk org tackles a range of problems including content moderation, internal tooling, identity verification, access control, and account security.
About the Role
In this role, you’ll be a member of our Security team. You’ll split your time between contributing to security projects and responding to security investigations, vulnerabilities, or questions. The work spans application security, infrastructure security, and internal/corporate security. It includes both proactive and reactive security work. You’ll be part of an on-call rotation and help respond to security incidents and investigations. You’ll write code – both to support security work and to improve the security of the Patreon platform. You’ll work closely with other members of the security team, the wider Risk engineering org, and cross functional partners in engineering, legal, and IT. Your work will help reduce known risks and will protect the security, privacy, and trust of Patreon creators and their fans.
What you’ll need:
- You have two or more years of experience reducing security risks in the application, infrastructure, or corporate security spaces. You can create a threat model and to explain why a given risk matters and what we might do to reduce it.
- You have deeper knowledge (three or more years) in at least one security or security-adjacent domain (infrastructure security, application security, cloud security, corporate/IT security, cryptography, privacy, etc.)
- You can develop software (Python, Rust, Golang, or a similar language). You have experience working in a modern software development environment (git, CI/CD, LLM coding tools, etc.)
- You have experience using AI tools (LLMs, ML models, etc) to identify and address security issues (software vulnerabilities, detection and response, etc.)
- You’re energized by fast iteration: shipping MVPs, testing hypotheses, and evolving products based on what creators and fans respond to.
- You take pride in creating elegant solutions to messy, real-world problems and balancing pragmatic trade-offs between security risks and business needs.
- You believe in Patreon’s mission: giving creators control over their work and building communities that feel good to be in.
- Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field, or the equivalent
Bonus if you have:
- Experience working on large scale Internet platforms that allow users to upload content.
- Past contributions to large scale, production code bases.
- Experience responding to security incidents, investigating incident impact, and building out incident mitigations.
We hire talented and passionate people from different backgrounds because workplace diversity and inclusion is critical to our ability to serve creators worldwide. If you’re excited about a role but your past experience doesn’t match with every bullet point outlined above, we strongly encourage you to apply anyway. If you’re a creator at heart, are energized by our mission, and share our company values, we’d love to hear from you.
About Patreon
Patreon powers creators to do what they love and get paid by the people who love what they do. Our team is passionate about making this mission and our core values come to life every day in our work. Through this work, our Patronauts:
- Put Creators First | They’re the reason we’re here. When creators win, we win.
- Build with Craft | We sign our name to every deliverable, just like the creators we serve.
- Make it Happen | We don’t quit. We learn and deliver.
- Win Together | We grow as individuals. We win as a team.
Patreon is proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class. If you need a reasonable accommodation during the interview process, please let us know via email at accommodations@patreon.
Patreon offers a competitive benefits package including and not limited to salary, equity plans, healthcare, flexible time off, company holidays and recharge days, commuter benefits, lifestyle stipends, learning and development stipends, patronage, parental leave, and 401k plan with matching.
Patreon operates under a hybrid work model, where employees based in office locations are expected to come into the office three days per week, excluding sick time and paid leave. The goal of this policy is to be intentional about the in-person time we spend together to strengthen the feeling of community at Patreon. Candidates hired into remote-eligible roles are not expected to meet the same requirements.
At Patreon, we believe in fair and transparent pay. In compliance with New York and California pay transparency laws, we are sharing the expected salary range for this role.
The posted salary range is dependent on the location and the level. This range may encompass multiple levels within the role’s job family. The final offer will be based on candidate’s experience, skills, competencies, and geographic location, aligning with the appropriate job level within Patreon’s leveling framework. For remote employees located outside CA and NY, salary may vary based on location and local market conditions.
Patreon reserves the right to modify or update compensation and benefits at any time.