Senior Software Engineer, Security

SeatGeek believes live events are powerful experiences that unite humans. They are seeking a Senior Software Engineer, Security to work within their Security team, focusing on security engineering, product security, and incident response. The role involves building security tools, providing guidance on new technologies, and collaborating with various teams to enhance the company's security posture.

Responsibilities:

• Build and contribute to secure-by-default protections across the stack (cloud, CI/CD, applications, and endpoints) by creating paved roads and guardrails that make the secure path the easy path within your problem space
• Provide practical security guidance on new products and technologies, recommending secure-by-default patterns that fit into existing workflows
• Help secure SeatGeek's use of AI — from LLM-assisted development to AI-powered product features — by building guardrails and reviewing for risks like prompt injection, sensitive-data exposure, and insecure model and tool integrations
• Contribute to design reviews and threat modeling for high-impact features and services; surface risks early and help ensure mitigations are designed in
• Build security tooling that prevents issues at build/deploy time and helps automate detection and response in production
• Improve our detection and incident response capabilities — raise signal quality, tune detections, and implement automated responders that reduce manual toil and time to contain
• Partner with engineering and business teams on cross-functional security work: endpoint and device trust, identity and email protections, security awareness and training, vendor reviews and risk assessments, and supporting compliance efforts (e.g., PCI/SOX)
• Protect SeatGeek from abuse and bots at the edge and app layers through layered defenses and tuning
• Contribute to security incidents and tabletops, including writing incident reviews; help improve runbooks, processes, and stakeholder communications afterward
• Advocate for strong secure coding practices and contribute to a pragmatic, positive security culture across your team and partner teams

Requirements:

• 3+ years of broad, hands-on experience across multiple security domains, with strong software engineering fundamentals; track record of driving security projects end-to-end (from design through rollout and adoption)
• Proficiency in one or more programming languages (we use Python, Go, and C#); you write production-quality code and perform rigorous reviews for correctness and security
• Experience partnering across product, platform, and business functions to contribute to cross-team security outcomes
• Ability to build scalable, preventative security solutions across domains (platform/cloud, applications, CI/CD, identity and endpoints), favoring reusable guardrails over one-off fixes
• Ability to think like both an attacker and a defender — leveraging each perspective to strengthen the other and drive meaningful improvements in prevention, detection, and response
• Familiarity with the security implications of AI/LLM systems — LLM-assisted development, prompt injection, data leakage, and securing model/agent integrations — is a plus