PostHog
Security Engineer
Senior security engineer for a remote EU/UK team, owning AWS detection, alert tuning, incident response, and building the security operations function from the ground up.
Captured October 2026Still open as of Oct 11, 2026 ↗
The role
This is a generalist security role embedded in a fast-growing, open-source analytics company that builds its own internal security tooling and agents. The person will shape the security function as it scales, working alongside product squads rather than gatekeeping them.
What you would do
- Tune cloud posture alerts so only meaningful findings reach the team
- Lead incident response, coordinate containment, and run post-mortems
- Create detection pipelines and close gaps in network visibility back to code
- Hunt for threats proactively in the AWS footprint and define telemetry for it
- Run the vulnerability disclosure intake and work toward a bug bounty
- Support product teams with threat modeling and secure design reviews
What they asked for
- 3+ years of security engineering with deep AWS experience
- Hands-on familiarity with CSPM/CNAPP tooling and building trusted detections
- Prior experience leading incident response under pressure
- Comfortable making decisions independently without an established SOC playbook
- Strong software engineering ability, including reading code to analyze exploits
- Collaborative approach focused on enabling engineers rather than blocking them
Nice to have
- Experience running incident management processes
Selected employer postings. AI-assisted summaries may contain errors. This is not a market-wide sample. Independent of the companies listed.