Security Engineer

Security Team

• Location

  Remote (EMEA, UK)

• Timezone(s)

  GMT +2 to GMT 0

About PostHog

We equip every developer to build successful products.

We started with open-source product analytics, launched out of Y Combinator's W20 cohort.

We've since shipped more than a dozen products, including a built-in data warehouse, a customer data platform, and Max AI, an AI-powered analyst that answers product questions, helps users find useful session recordings, and writes custom SQL queries.

Next on the roadmap are messaging, customer analytics, ai task creation and coding based on customer data, logs and support analytics.

Our values are not a poster on the wall full of aspiration. They’ve come from how we really work, day in day out.

PostHog is open source product led, and a default alive company that is well funded.

Things we care about

• Transparency: Everyone can read about our roadmap, how we pay (or even let go of) people, our strategy, and how we work, in our public company handbook. Internally, we share revenue, notes and slides from board meetings, and fundraising plans, so everyone has the context they need to make good decisions.

• Autonomy: We don’t tell anyone what to do. Everyone chooses what to work on next based on what's going to have the biggest impact on our customers, and what they find interesting and motivating to work on. Engineers lead product teams and make product decisions. Teams are flexible and easy to change when needed.

• Shipping fast: Why not now? We want to build a lot of products; we can't do that shipping at a normal pace. We've built the company around small teams – autonomous, highly-efficient groups of cracked engineers who can outship much larger companies because they own their products end-to-end.

• Time for building: Nothing gets shipped in a meeting. We're a natively remote company. We default to async communication – PRs > Issues > Slack. Tuesdays and Thursdays are meeting-free days, and we prioritize heads down building time over perfect coordination. This will be the most productive job you've ever had.

• Ambition: We want to solve big problems. We strongly believe that aiming for the best possible upside, and sometimes missing, is better than never trying. We're optimistic about what's possible and our ability to get there.

• Being weird: Weird means redesigning an already world-class website for the 5th time. It means shipping literally every product that relates to customer data. It means building an objectively unnecessary developer toy with dubious shareholder value. Doing weird stuff is a competitive advantage. And it's fun.

Who we're looking for

We are looking for an expert security generalist to assist with all things security at PostHog. Someone equally adept (and interested!) in building secure libraries, writing semgrep rules, hardening cloud deployments, improving network observability, and leading incident response.

Someone to take the reins of our security operations, build out our detection pipelines, and ensure that when something goes bump in the night, we have the observability to know exactly what happened. We're a team that's building internal security products and agents - things like agents to automatically triage wiz alerts, automatically review pull requests, automatically assign vulnerability findings to the owning product team.

In this role you’ll:

• Build from Scratch: You aren't maintaining someone else's legacy SIEM. You are shaping the security team, culture and tooling for a high-growth, open-source company.

• Zero Bureaucracy: We hate meetings. We don't have "Security Committees." You have the autonomy to make changes and move fast.

• Transparency: We work in the open. You’ll be able to see (and contribute to) how we handled past incidents, like this NPM package compromise.

• Direct Impact: Your work directly protects the data of thousands of customers. When you improve our security posture, the whole company (and our community) feels it.

What you'll be doing

• Triage and Tune: You’ll own our Wiz alerts. You’ll be responsible for turning "noise" into "actionable findings" and ensuring we aren't just staring at a dashboard of issues that don't actually matter. We already get relatively few alerts, and we’d like to even further reduce that to just the ones that matter.

• Incident detection, response: You’ll lead the charge on security incidents. Whether it’s a compromised NPM package or a suspicious IAM pattern, you’ll help coordinate the response and lead the post-mortem. You’ll also help build our IR runbooks.

• Build Observability: You’ll build detection pipelines, and close our network-based observability gaps. We want to be able to trace network requests and suspicious activity all the way back to specific code paths.

• Threat Hunting: You’ll proactively hunt for threats in our AWS environment. You won't just wait for an alert; you'll define what "good" looks like and build the telemetry to prove it.

• The VDP: You’ll support our Vulnerability Disclosure Program, triaging reports from researchers and eventually transitioning us toward a formal bug bounty program.

• Enable the Team: You’ll support our product squads with threat modeling and secure design reviews. We don't do "Security says no", we do "Security says 'here is how to do this safely.'"

• Help build our security culture: Our engineers trust the security team and view security as an enabler. You’ll be a crucial part of helping to continue this excellent (and uncommon) working relationship.

While this is not a Corporate security (MDM, endpoint, device trust) or Supply chain/CI-CD hardening role, in true PostHog style, there are opportunities to work on these as well

Requirements

• Cloud Native: You have 3-5+ years of experience in security engineering with a heavy focus on AWS. You know your way around IAM, VPC logs, and CloudTrail like the back of your hand.

• Detection Specialist: You’ve used CSPM/CNAPP tools (like Wiz or Prisma) and, more importantly, you know how to build detection pipelines that engineers actually trust.

• Battle-Tested: You’ve led incident response before. You’re calm under pressure and know how to coordinate across teams to contain a threat.

• High Autonomy: We don’t have a security SOC. You’ll be building this function from scratch, so you need to be comfortable deciding what’s important and executing on it without a manual.

• Engineering skills: You bring strong engineering experience and next to digging into code to understand an exploit or a vulnerability, you can write code with the same proficiency as our product engineers.

• Communication and attitude: As mentioned before we don't do "Security says no", we do "Security says 'here is how to do this safely.” This is crucial for us, we need people that want to enable engineers and work with them, not limit them.

We are committed to ensuring a fair and accessible interview process. If you need any accommodations or adjustments, please let us know.

Meet the Security Team

Team members

Does pineapple belong on pizza?

Salary

We have a set system for compensation as part of being transparent. Salary varies based on location and level of experience.

Learn more about compensation

Location

Level

Step

Salary calculator

1. Benchmark (United States - San Francisco, California) $285,000
2. Level modifier 1
3. Step modifier 0.95 - 1.04

Benefits

• Generous, transparent compensation & equity
• Unlimited vacation (with a minimum!)
• Two meeting-free days per week
• Home office
• Coworking credit
• Private health, dental, and vision insurance.
• Training budget
• Access to our Hedge House
• Carbon offsetting
• Pension & 401k contributions
• We hire and pay locally
• Company offsites

Get more details about all our benefits on the Careers page.

Your team's mission and objectives

Protecting PostHog and its customers

Q3 2026 goals

These goals are intentionally vague to avoid disclosing sensitive information.

Automate routine security work

• Triage vulnerabilities and threat alerts with minimal human intervention

Improved application secrets management

• Secrets that are easier to manage, rotate, and audit

Update packages without humans

• Dependency update PRs that merge themselves

Speed up incident response

• Detect and contain malicious activity faster

GitHub hardening

• Commit signing enforced org-wide
• No more SSH keys on disk

Interview process

We do 2-3 short interviews, then pay you to do some real-life (or close to real-life) work.

• 1Application (You are here)Our talent team will review your application

  We're looking to see how your skills and experience align with our needs.

• 2Culture interview30-min video call

  Our goal is to explore your motivations to join our team, learn why you’d be a great fit, and answer questions about us.

• 3Technical interview45 minutes, varies by role

  You'll meet the hiring team who will evaluate skills needed to be successful in your role. No live coding.

• 4Culture & Motivation interview20 minutes, varies by role

  You have reached the final boss. It's time to chat with one of our Blitzscale team members.

• 5PostHog SuperDayPaid day of work

  You’ll meet a few more members of the team and work on an independent project. It's challenging, but most people say it's fun, and we'll pay you $1,000 for your efforts!

• 6OfferPop the champagne (after you sign)

  If everyone is happy, we’ll make you an offer to join us - YAY!

Apply

(Now for the fun part...)

Just fill out this painless form and we'll get back to you within a few days. Thanks in advance!

Requires 3–5+ years in security engineering, strong AWS, IAM, VPC logs, CloudTrail, CSPM/CNAPP, incident response, detection pipelines, coding, and secure design experience.

Key Responsibilities

• triaging alerts
• leading incidents
• hunting threats

Skills & Tools

AWS, IAM, CloudTrail, Wiz, Prisma, Semgrep, SIEM, NPM, Slack, GitHub

Job Details

• Category: Information Technology
• Seniority: Mid Level
• Commitment: Full Time
• Workplace: Remote — Europe or Africa or United Kingdom
• Salary: USD 270,750 – 296,400 / year
• Languages: English

Benefits

• 401k matching
• Generous paid time off
• Tuition reimbursement
• Retirement plan

About PostHog

An open-source technology company that builds product analytics, data, and developer tools. — Industry: Information Technology