SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Linear is building the product development system for teams and agents, serving 30,000+ companies including OpenAI, Coinbase, and Ramp. As a Senior Security Engineer, you'll operate in a high-autonomy role doing hands-on security work across product and infrastructure, with real scope and meaningful impact.
You'll own multiple security domains depending on your experience and priorities:
- Operate and automate vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies while maintaining meaningful SLAs.
- Run the bug bounty program: triage reports, validate severity, coordinate fixes with engineering, and maintain researcher relationships.
- Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security risks, and conduct hands-on testing beyond scanner reliance.
- Serve as primary incident responder: lead investigations and containment, drive postmortems, and translate lessons into concrete hardening work.
- Own cloud/infrastructure security posture on GCP/Kubernetes/Postgres: harden configurations, close audit gaps, and partner with infrastructure engineering on secure defaults.
- Build security tooling and automation, including AI/LLM-assisted triage, code review, and investigation to scale the program without proportional headcount growth.
- Partner with GRC/Trust function: feed findings into risk registers, provide control evidence, and ensure compliance requirements reflect actual engineering practice.
Linear's stack includes Cloudflare, Google Cloud, Kubernetes, Postgres, and Node.js. You'll use tools like GitHub Advanced Security, RunReveal, SentinelOne, and Vanta. The company is remote-first with distributed teams across North America, Europe, and Australia, emphasizing deep focus and async collaboration with intentional in-person moments.
Linear offers competitive salary and equity with employee-friendly terms, 5 weeks paid vacation, 4 months paid parental leave, paid month off after 4 years, daily meal/coffee stipend, paid co-working space, and comprehensive health coverage.
REQUIREMENTS:
- 5+ years of security engineering experience with real depth in at least two of: vulnerability management, product/application security testing, incident response, or cloud security.
- Hands-on and technical: able to read and reason about code (TypeScript preferred), comfortable in cloud environments (GCP a plus), and capable of going deep on findings rather than delegating.
- Comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc.).
- Calm under pressure: can lead incidents from first alert through postmortem independently.
- Builder mindset: prefer writing scripts and shipping tools over repeating manual processes.
- Pragmatic risk-reducer: optimize for actually reducing risk, not checking boxes or maximizing findings count.
- Autonomy-oriented: comfortable setting priorities, working independently, and knowing when to escalate.
- Clear communicator: able to explain technical findings to non-technical stakeholders and write actionable reports.
About Linear
SaaS / Enterprise Software; Product — issue tracking and product development workflow software.
