Security Engineer, Platform
Resend · United States
What the posting says
Each fact carries its state:Statedfound in the postingConflictstwo statements disagree, both quotedNot mentionedthe posting does not say
- Employment typeStated
- Full time
- Work arrangementStated
- Remote OK
Not mentioned in this posting
“Not mentioned” means the posting does not say. It is not a no. You could ask the recruiter.
- PayNot mentioned
- The posting does not say
- ShiftNot mentioned
- The posting does not say
- ExperienceNot mentioned
- The posting does not say
- EducationNot mentioned
- The posting does not say
- Visa sponsorshipNot mentioned
- The posting does not say
Requirements, each with its sentence from the posting
These are the employer’s words. The index does not judge whether you meet them.
- No requirement has been itemised for this posting yet. The employer’s words are in the full posting below.
Read the full posting as the employer wrote it
Resend is growing fast, and there are now over 4 million developers using it. As the Platform Squad, we are responsible for the internal platform and reliability foundations that let Resend teams build, deploy, observe, and operate services safely.
This role is fully remote based in Americas or European timezones, with some expected travel for team offsites, conferences, meetups, and more.
Read more about how we work, how we hire, and what we value here.
In this role, you will…
Build and improve the security foundations of Resend’s platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls
Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines
Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events
Review and update our processes/pipelines so that security is “built-in”, not “bolt-on”
Raise the security bar
You will be a great fit if you...
Have experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products
Can write code and are comfortable reading application, infrastructure, and deployment code
Understand authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines
Independently prioritize and drive your day-to-day as the first dedicated security hire
Prefer practical improvements over heavy processes
Are low-ego, direct, curious, and willing to learn from others
Care about developer experience and believe security should be easy to adopt
You will be an exceptional fit if you also...
Have experience with email infrastructure, transactional email, sender reputation, domain verification, SPF, DKIM, DMARC, webhooks, or abuse prevention
Have secured cloud infrastructure using tools like AWS, Terraform, Kubernetes, Cloudflare, or similar systems
Have experience with open source security, GitHub organization hardening, package publishing, dependency review, or supply-chain security
Have helped a company prepare for SOC 2, ISO 27001, GDPR, enterprise security reviews, or customer trust processes without turning engineering into a compliance machine
Have built security observability, alerting, detection pipelines, or incident response workflows
Have worked closely with Trust & Safety, anti-abuse, fraud, or platform integrity teams
Have experience designing security systems for high-scale developer products
What it means to join the team:
Autonomy to "just ship it"
100% remote team with flexible working schedules
Modern tech stack (Next.js, Raycast, Notion, etc.)
Honest and low-ego team
Ownership of problems and solutions
Comp: $140,000 - $160,000 USD, commensurate with location and experience
About Resend
We are building the modern email sending platform for developers. We care deeply about quality, craft, and the developer experience.
Our fully remote team of 50 spans 15 countries and counting. We're backed by a16z, Y Combinator, and others. Meet the humans →
The posting text is reproduced as the employer wrote it; the index adds nothing to it.