Staff Software Engineer, Security

Slack - Atlanta, GA

Atlanta, GA

Publishing Industries

About the position

We're Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too - driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good - you've come to the right place. Our security team supports the unwritten fourth tenet of Slack's mission: make people's working lives more secure. We're serious about protecting our infrastructure, operations, and most importantly, our customers' data. We take a systemic approach to security and strive to provide a low friction, high-impact security model across everything we do. We're looking for a golang developer to help contribute to our Security Engineering team. Significant software engineering experience is a requirement, while a side interest in operations, incident response, curiosity, and a deep desire to learn is paramount. This role is to work directly on the Slack Security Operations team with a focus on our Nebula roadmap. This is an open source project that originated at Slack, and has moved to broader parts of the internet. Collaboration with external corporate partners as well as internal users and developers are all part of the job. The role is within a threat detection focused blue team and includes both incident response and on-call obligations. We know that no system is flawless, but we aim to provide a record of all actions taken in our environment to address any unknowns.

Responsibilities

• Writing go to contribute to Nebula, Slack's mesh overlay software defined network
• Detect threats and help Slack be more secure
• Creatively scale and operate the infrastructure and tools that handle millions of events per second
• Respond in our on-call rotation to fix services we run and investigate potential threats
• Identify and develop new features and a roadmap to augment existing tools to protect Slack's production infrastructure and to help make our business lives simpler, more pleasant, more productive, and more secure

Requirements

• Curiosity and creativity. You want to know why something happened, not just that it happened.
• A desire to empower your coworkers. This is a role afforded the latitude to define workstreams, and entrusted to approach engineering problems as an art form.
• Motivation to solve problems, not to patch over quick fixes.
• Eagerness to collaborate across the company.
• Broad exposure to various security disciplines and deep understanding of models and reasons behind core security concepts such as MFA, ZeroTrust, and securely managing secrets or tokens.

Nice-to-haves

• AWS - We run almost everything here, so existing proficiency is a plus, but we can teach you if you're more comfortable with another provider
• Elasticsearch / Kibana - you can readily access information and love metrics