Senior Security Engineer - Vulnerability Management
Ready to build the future of security at one of the world's most loved cybersecurity companies? 1Password is looking for a passionate and experienced Senior Security Engineer to join our Application Security team and drive our Vulnerability Management Program to the next level.
About 1Password: Securing the Future, One Password at a Time
At 1Password, we're on a mission to revolutionize digital security and productivity. We empower individuals and businesses to securely adopt the SaaS and AI tools they need to thrive. With over 180,000 businesses trusting us, including Fortune 100 leaders and innovative AI companies, we're pioneering Extended Access Management and setting the standard for human-centric security. Ranked on the Forbes Cloud 100 for four years running and partnering with industry giants like Oracle Red Bull Racing, we're growing faster than ever.
The Opportunity: Secure 1Password From the Inside Out
As a Senior Security Engineer on the Application Security team, you'll be a key player in enabling 1Password to build and deliver secure products with unwavering confidence. You'll focus on building, scaling, and maturing our Vulnerability Management Program, a critical function for continuously identifying, assessing, prioritizing, and driving remediation of security vulnerabilities across our entire ecosystem.
What You'll Do: Drive Impact & Innovation
Design, build, integrate, and scale cutting-edge security solutions to power our vulnerability management program.
Develop and maintain sophisticated tools to correlate, enrich, and prioritize security vulnerability findings from diverse data sources.
Craft comprehensive dashboards and reporting metrics tailored for various audiences (technical, non-technical, compliance, senior leadership).
Conduct in-depth analysis to help security development teams eliminate entire classes of vulnerabilities.
Collaborate with product and development teams to streamline vulnerability triage workflows, validate findings, and define remediation strategies that prioritize user experience.
Contribute to the design of risk-scoring and SLA models aligned with critical business priorities.
Mentor junior engineers and play a vital role in shaping the future of our vulnerability management strategy.
This is a fully remote opportunity within Canada and the US.
What You Bring: Your Expertise & Passion
5+ years of experience in IT or Engineering with a dedicated focus on security.
Demonstrable passion and hands-on experience with bug bounty programs, vulnerability research, validation, remediation, or penetration testing.
Experience developing internal security tools and empowering engineering teams.
A strong understanding of software development principles and comfort reading and writing code.
Exceptional teamwork and communication skills, enabling effective collaboration with diverse technical and non-technical stakeholders.
Proven ability to own and set technical direction for small to medium-sized initiatives.
Adaptability and resilience, thriving in fast-paced environments with constantly evolving priorities.
Bonus Points: Stand Out From the Crowd
Experience with Rust and/or Golang, or a proven aptitude for quickly learning new languages.
Familiarity with popular compliance standards and certifications (e.g., SOC2, ISO, PCI).
Experience building or maintaining vulnerability management programs in medium to large organizations.
Compensation & Benefits: We Invest in Our People
USA-based roles: The annual base salary for this role is between $156,000 USD and $210,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles: The annual base salary for this role is between $143,000 CAD and $193,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
Our Culture: Collaboration, Innovation, and People-First
We're a team that values collaboration, transparent communication, and a commitment to our core values: keep it simple, lead with honesty, and put people first. If you're driven to make an impact, thrive in a fast-paced environment, and are passionate about solving challenging problems, you'll find a home at 1Password.
Our Approach to Remote Work: Connected, Even From Afar
We're a remote-first company, but we believe in the power of in-person connection. Expect opportunities for travel to team meetings, department offsites, and industry events.
What We Offer: Invest in Yourself
Health and wellbeing:
👶 Generous maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future:
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community:
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
You Belong Here: Join the 1Password Team!
1Password is an equal opportunity employer committed to fostering an inclusive, diverse, and equitable workplace. We welcome all individuals and encourage you to bring your authentic self to work.
Accommodation is available upon request at any point during our recruitment process.
Remote work at 1Password does mean working from your home country.
Successful applicants will be required to complete a background check.
1Password uses AI/ML technologies to assist in the initial screening of applications. You may opt out. See our Candidate Privacy Notice for more information.