Staff+ Security Engineer, Core Command

Acts as the embedded security engineer for Verkada's Core Command engineering team, owning the security roadmap and requirements for the Command platform's core services (authentication, authorisation, users, roles and audit) and its web and mobile apps. The engineer runs threat models, architecture analysis and design reviews of sensitive features, sets up security tooling and secure defaults in the development lifecycle, trains engineers, builds and runs a bug bounty program, and triages findings from tools, outside assessments and researchers. Verkada wants seven or more years as a security engineer in an advisory capacity, cloud experience, sound knowledge of attacks and mitigations, and enough Python or Go to write production code and proofs of concept. Based in San Mateo.