Note: The job is a remote job and is open to candidates in USA. PlanetScale is a rapidly growing company reinventing the database space. They are seeking a Software Engineer: Information Security to build security into every layer of their infrastructure while maintaining an exceptional developer experience.

Responsibilities

• You will design and implement security controls for PlanetScale's cloud-native database platform, protecting millions of queries per second for some of the world's largest applications
• You will collaborate with engineering teams to conduct security reviews, threat modeling, and provide secure coding guidance across our distributed systems
• A special focus for this role is on proactive red teaming and testing - you will consistently try to break into the PlanetScale platform as an attacker would, and help patch what you find
• You will evaluate, procure, and implement proactive security tools and technologies to strengthen our security posture
• You will work closely with our compliance team to ensure adherence to SOC 2, PCI DSS, and other security frameworks
• You will build security automation and tooling to scale security practices across the engineering organization
• You will respond to security incidents and conduct post-incident reviews to improve our security resilience

Skills

• 5+ years of software engineering experience with a focus on security engineering or application security
• Strong proficiency in Go, with experience in other languages like Python, Java, or C++
• Experience securing cloud-native applications and infrastructure (AWS, GCP, Azure)
• Knowledge of database security, encryption, and access controls
• Experience with security frameworks and compliance requirements (SOC 2, PCI DSS)
• Understanding of threat modeling, security architecture, and secure coding practices
• Experience with database internals, distributed systems security, or infrastructure security
• Background in security tool evaluation, implementation, and automation
• Experience with Kubernetes security, container security, and cloud security posture management
• Knowledge of security monitoring, incident response, and vulnerability management
• Previous experience at a high-growth technology company or in a security engineering role
• Relevant security certifications (CISSP, CISM, CEH, etc.)

Company Overview

Company H1B Sponsorship