SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
1Password is seeking a Senior Security Engineer to join its Product Security team. The role focuses on leading and maturing incident response capabilities for a market-leading enterprise password manager and Unified Access Management platform trusted by over 180,000 businesses.
Key responsibilities include:
- Leading end-to-end response to product security incidents, from discovery through triage, remediation, and disclosure
- Owning and evolving 1Password's PSIRT (Product Security Incident Response Team) function, including incident classification frameworks, severity models, escalation paths, and response playbooks
- Driving coordinated vulnerability disclosure (CVD) processes in partnership with the bug bounty program and external security researchers
- Serving as primary coordinator across Product Security, Engineering, Legal, Communications, and Customer Success during active incidents
- Leading post-incident reviews and translating findings into systemic improvements
- Developing and maintaining incident response tooling, automation, and reporting to reduce detection and response times
- Contributing to customer-facing security advisories, CVE disclosures, and public incident communications
- Evaluating and integrating AI-powered tooling to improve incident detection and response effectiveness
- Mentoring other engineers on the team
Required qualifications:
- 5+ years of IT or Engineering experience with security focus
- Hands-on experience leading or participating in security incident response, ideally in product or SaaS environments
- Experience with coordinated vulnerability disclosure and managing relationships with external security researchers
- Strong judgment under pressure with ability to make clear, defensible decisions with incomplete information
- Experience building or formalizing incident response capabilities from the ground up
- Experience drafting customer security advisories, CVEs, or public-facing incident communications
- Strong communication skills across technical and executive audiences
- Comfort reading and writing code for forensic analysis, automation, and tooling
- Experience leveraging AI/ML to accelerate security workflows
Bonus qualifications include familiarity with CVSS/EPSS frameworks, consumer/B2B SaaS environments, SBOMs, compliance standards (SOC 2, ISO 27001), and relevant certifications (GCIH, GCFE, GCFA, PNPT).
1Password is a Forbes Cloud 100 company with $400M+ ARR, backed by major partners and trusted by Fortune 100 companies and leading AI firms. The company emphasizes human-centric security, thoughtful AI integration, and a culture of solving hard problems in fast-paced environments.
