Redpanda powers an Agentic Data Plane and Data Streaming platform for real-time performance, AI innovation, and simplified operations. Backed by Lightspeed and GV.
About the role
We're looking for an experienced Staff Security Engineer to own and scale application security across Redpanda's products, from the C++ core streaming engine to our Go cloud control plane, Console, and Rust/Go data-transform SDKs.
What they're looking for
- 7+ years in application or product security or adjacent specialties, with a track record of owning AppSec initiatives end-to-end and influencing engineering teams without direct authority
- Comfort with the security risks of memory-unsafe code and the appetite to fuzz it, fuzzing or sanitizer experience is a strong plus
- Practical proficiency with the AppSec toolchain (SAST, SCA, secret scanning, DAST) and the judgment to apply risk-based prioritization rather than rigid textbook approaches
- Demonstrated experience leading threat modeling and secure design reviews for non-trivial systems
- Working knowledge of software supply-chain security (dependencies, SBOMs, signing, SLSA) and secure CI/CD practices
- Familiarity with cloud (AWS / GCP / Azure) and Kubernetes security as it relates to the application layer
More about this role
Redpanda is the first runtime and control plane for agent-data interaction — a unified platform that combines streaming, SQL analytics, and intelligent connectivity with the governance layer enterprise AI agents need in production.
Built on infrastructure already trusted by Fortune 500 companies and fast-growing startups, Redpanda enforces governance entirely outside the agent's data path, controlling what agents see, limiting what they do, and capturing a tamper-proof record of everything they touch, so organizations never have to choose between innovation and control.
We're looking for an experienced Staff Security Engineer to own and scale application security across Redpanda's products, from the C++ core streaming engine to our Go cloud control plane, Console, and Rust/Go data-transform SDKs. Security at Redpanda is an engineering problem, not a checklist: you'll spend your time analyzing and breaking real systems code, building the paved roads and automation that make the secure path the default, and helping teams ship faster because security is built in rather than bolted on.
You'll be one of two engineers on a small, high-trust product security team, partnering every day...
Browse similar: Startup jobs · Remote jobs