{"schemaVersion":"jobsearcher.job.v1","id":"07a95c941edb44d65831002d","url":"https://jobsearcher.com/jobs/07a95c941edb44d65831002d","canonicalUrl":"https://jobsearcher.com/jobs/07a95c941edb44d65831002d","title":"Security Engineer [IC3]","description":"Who we areOur mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase.With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once.Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love.If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us.Hours & location🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with EST for at least 10 hours/week.Preferred locations:EuropeWhy this job is excitingAs a Security Engineer, you will join our exceptional security team tasked with building world-class security into our product offerings by working on security operations, maintaining and improving our monitoring and alerting stack, participating in on-call and responding to security incidents, application security testing, bug bounty programs, and security reviews for both application and infrastructure security. You will proactively improve the security of our codebase, product, cloud, and customers' on-premise deployments. This is a generalist role where you will be primarily focused on Security Operations, but will also work across all facets of a security program.Within one month, you will…Be onboarded to our alerting and monitoring stackBe able to participate in on-call rotationsYou will discover, fix, and mitigate infrastructure vulnerabilities by updating libraries, base images, and analyzing containersWithin three months, you will…Maintain internal systems, such as automations that assist in alert triagingYou will work with other teams to triage, troubleshoot, and mitigate customer concerns and questions about our securityYou will enhance our application security with audits, best practices, code fixes, and continuous educationYou will perform reactive incident response if a security event occursYou and your manager will work together on a career plan with actionable goalsWithin six months, you will…You will perform proactive research to detect new attack vectorsYou will perform threat modeling for existing and future applications You will assess and integrate new tools and technologies to improve our operational efficienciesYou will help maintain compliance with SOC 2, ISO 27001 & GDPR standardsAbout YouEqual parts engineer and security professional, you are excited about joining a team that is building a world-class security system trusted by some of the biggest tech companies in the world. You and your teammates are Sourcegraph’s first line of defense against bad actors using all the newest and dirtiest tricks to hack us and (more importantly) our customers. You want to be a part of the foundational team, the first steps we are taking to build something big, something trusted, something critical to software and our customersYour skill-set:Practical experience reviewing SIEM alerts and participating in on-call rotationsPractical experience securing SaaS applications as a security generalist, including infrastructure security, application security, and/or complianceExperience with Go, including writing and maintaining internal tooling along with code reviewsExperience with Elastic stack and GCPExperience using and automating a wide range of defensive security toolsExperience working across engineering teams to secure projects across the organization.You are high agencyYou communicate effectively in writing and documentationNice to haves:Experience developing software as an engineer (i.e., writing code and contributing directly to applications)Experience working in a startup environmentExperience with TypeScript and TerraformExperience with KubernetesExperience securing AI productsLevel📊 This job is an IC3. You can read more about our job leveling philosophy in our Handbook.Compensation💸 We pay above-market salaries because we want to hire exceptional people who can focus on building great products, not worrying about paying bills. As an open and transparent company, our compensation philosophy and pay bands are visible to every Sourcegraph teammate, and we strive to make our approach equitable, explainable, and competitive.Your base salary is determined by the IC3 pay band for your location zone (1-4). Our pay bands are informed by market data and designed to ensure competitive compensation wherever you live. During the recruiting process, we'll discuss the range applicable to you based on job level, relevant skills, experience, qualifications, and location zone. 💰 The starting salary for the IC3 pay band in each zone is:Zone 2: $144,000 USDZone 3: $108,000 USDZone 4: $72,000 USD📈 In addition to competitive cash compensation, we offer meaningful equity (because when Sourcegraph succeeds, we want you to succeed, too) and generous perks & benefits.Interview process Below is the interview process you can expect for this role (you can read more about the types of interviews in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all! We expect the interview process to take","company":"Sourcegraph","rawCompany":"sourcegraph","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-08-14T12:55:39.929Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Engineer [IC3]","description":"Who we areOur mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase.With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once.Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love.If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us.Hours & location🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with EST for at least 10 hours/week.Preferred locations:EuropeWhy this job is excitingAs a Security Engineer, you will join our exceptional security team tasked with building world-class security into our product offerings by working on security operations, maintaining and improving our monitoring and alerting stack, participating in on-call and responding to security incidents, application security testing, bug bounty programs, and security reviews for both application and infrastructure security. You will proactively improve the security of our codebase, product, cloud, and customers' on-premise deployments. This is a generalist role where you will be primarily focused on Security Operations, but will also work across all facets of a security program.Within one month, you will…Be onboarded to our alerting and monitoring stackBe able to participate in on-call rotationsYou will discover, fix, and mitigate infrastructure vulnerabilities by updating libraries, base images, and analyzing containersWithin three months, you will…Maintain internal systems, such as automations that assist in alert triagingYou will work with other teams to triage, troubleshoot, and mitigate customer concerns and questions about our securityYou will enhance our application security with audits, best practices, code fixes, and continuous educationYou will perform reactive incident response if a security event occursYou and your manager will work together on a career plan with actionable goalsWithin six months, you will…You will perform proactive research to detect new attack vectorsYou will perform threat modeling for existing and future applications You will assess and integrate new tools and technologies to improve our operational efficienciesYou will help maintain compliance with SOC 2, ISO 27001 & GDPR standardsAbout YouEqual parts engineer and security professional, you are excited about joining a team that is building a world-class security system trusted by some of the biggest tech companies in the world. You and your teammates are Sourcegraph’s first line of defense against bad actors using all the newest and dirtiest tricks to hack us and (more importantly) our customers. You want to be a part of the foundational team, the first steps we are taking to build something big, something trusted, something critical to software and our customersYour skill-set:Practical experience reviewing SIEM alerts and participating in on-call rotationsPractical experience securing SaaS applications as a security generalist, including infrastructure security, application security, and/or complianceExperience with Go, including writing and maintaining internal tooling along with code reviewsExperience with Elastic stack and GCPExperience using and automating a wide range of defensive security toolsExperience working across engineering teams to secure projects across the organization.You are high agencyYou communicate effectively in writing and documentationNice to haves:Experience developing software as an engineer (i.e., writing code and contributing directly to applications)Experience working in a startup environmentExperience with TypeScript and TerraformExperience with KubernetesExperience securing AI productsLevel📊 This job is an IC3. You can read more about our job leveling philosophy in our Handbook.Compensation💸 We pay above-market salaries because we want to hire exceptional people who can focus on building great products, not worrying about paying bills. As an open and transparent company, our compensation philosophy and pay bands are visible to every Sourcegraph teammate, and we strive to make our approach equitable, explainable, and competitive.Your base salary is determined by the IC3 pay band for your location zone (1-4). Our pay bands are informed by market data and designed to ensure competitive compensation wherever you live. During the recruiting process, we'll discuss the range applicable to you based on job level, relevant skills, experience, qualifications, and location zone. 💰 The starting salary for the IC3 pay band in each zone is:Zone 2: $144,000 USDZone 3: $108,000 USDZone 4: $72,000 USD📈 In addition to competitive cash compensation, we offer meaningful equity (because when Sourcegraph succeeds, we want you to succeed, too) and generous perks & benefits.Interview process Below is the interview process you can expect for this role (you can read more about the types of interviews in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all! We expect the interview process to take","datePosted":"2026-08-14T12:55:39.929Z","dateModified":"2026-08-14T12:55:39.929Z","hiringOrganization":{"@type":"Organization","name":"Sourcegraph","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"07a95c941edb44d65831002d"},"url":"https://jobsearcher.com/jobs/07a95c941edb44d65831002d"}}