Lead Software Engineer, Security

SeatGeek is a company focused on modernizing the ticketing industry through technology and a fan-first attitude. They are looking for a Lead Software Engineer in Security to oversee security initiatives, provide architectural guidance, and mentor teammates while enhancing the company's security posture across various platforms and products.

Responsibilities:

• Deliver proactive, secure-by-default protections across the stack (cloud, CI/CD, applications, and endpoints) by creating paved roads and guardrails that reduce risk at scale and become the default way to build
• Provide practical security guidance on new products and technologies, emphasizing secure-by-default patterns that fit seamlessly into existing workflows
• Lead design reviews and threat modeling for high-impact features and services; identify risks early and ensure mitigations are designed in
• Build and scale security tooling that prevents issues at build/deploy time and automates detection and response in production
• Evolve our detection and incident response capabilities — improve signal quality, tune detections, and implement automated responders to reduce manual toil and time to contain
• Partner across business functions to strengthen company-wide security: endpoint and device trust, identity and email protections, security awareness and training, vendor reviews and risk assessments, and support for compliance (e.g., PCI/SOX)
• Protect SeatGeek from abuse and bots at the edge and app layers through layered defenses and tuning
• Lead and participate in notable security incidents and tabletops; improve runbooks, processes, and stakeholder communications after each event
• Mentor engineers, uplevel secure coding practices, and contribute to a positive, pragmatic security culture across the company

Requirements:

• 5+ years of broad, hands-on experience across multiple security domains, with strong software engineering fundamentals; track record of leading cross-domain security projects end-to-end (from design through rollout and adoption)
• Proficiency in one or more programming languages (we use Python, Go, and C#); you write production-quality code and perform rigorous reviews for correctness and security
• Track record of partnering across product, platform, and business functions to drive company-wide security outcomes
• Proven ability to deliver holistic, scalable prevention across security domains (platform/cloud, applications, CI/CD, identity and endpoints), favoring paved roads and default guardrails over one-off fixes
• Ability to think like both an attacker and a defender — leveraging each perspective to strengthen the other and drive meaningful improvements in prevention, detection, and response
• Community contributions (research, talks/blogging/OSS) and hands-on bot/abuse mitigation experience are a plus