At Linear, we're not just building a product; we're redefining how the world develops software. With AI fundamentally transforming the development landscape, we're creating the essential tools for this new era. Since 2019, Linear has become the platform of choice for over 30,000 forward-thinking companies, including industry leaders like OpenAI, Coinbase, and Ramp, empowering them to plan, build, and ship their products with unparalleled efficiency.
Our global team, united by a relentless focus on craftsmanship, fast execution, and a deep care for quality, is scaling rapidly. As we evolve our product and expand into the enterprise space, security isn't merely an add-on—it's foundational. We've built a robust security program we're proud of, but the journey ahead is dynamic and impactful: staying ahead of a growing attack surface, responding swiftly and cleanly to incidents, and continuously hardening our product and infrastructure.
We're seeking a **Senior Security Engineer** to join our team in a high-autonomy, high-impact role. You'll be at the forefront of securing a cutting-edge product development system, engaging in hands-on security work across our entire product and infrastructure stack, significantly shaping our security posture as we innovate.
Your Mission at Linear **Lead Vulnerability Management:** Operate, automate, and extend our end-to-end vulnerability management program—from triage and prioritization to driving remediation across product, infrastructure, and dependencies. Ensure our SLAs are meaningful and actively met. Who You Are **A Seasoned Security Generalist:** You bring 5+ years of experience in security engineering, with deep expertise in at least two of the following: vulnerability management, product/appsec testing, incident response, or cloud security. Your breadth of knowledge is key; we seek a versatile problem-solver over a narrow specialist. Location & Work Mode Our Stack & Your Toolkit Linear, GitHub, Slack, and Google Workspace Our dedicated security tooling includes: GitHub Advanced Security What We Offer Competitive salary and generous equity package Learn How We Think and Work Read Me a story about our mission Linear is an equal opportunity employer. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.
As a key member of our team, your contributions will be diverse and critical. Depending on your expertise and our evolving priorities, you will:
**Elevate Bug Bounty:** Take ownership of our bug bounty program, triaging incoming reports, validating severity, collaborating with engineering for swift fixes, and fostering professional, responsive relationships with researchers.
**Drive Product Security Testing:** Conduct comprehensive threat modeling for new features (including our unique AI/agent-facing surfaces), perform meticulous design and code reviews for security risks, and execute hands-on testing (manual and tool-assisted) beyond sole reliance on automated scanners.
**Master Incident Response:** Serve as a primary responder for security incidents, leading investigations, containment efforts, driving thorough postmortems, and translating lessons learned into concrete hardening initiatives.
**Fortify Cloud & Infrastructure:** Own significant aspects of our cloud and infrastructure security posture on **GCP/k8s/Postgres**. Harden configurations, address gaps identified by audits or scanning, and partner with infrastructure engineering to establish secure defaults.
**Innovate Security Tooling & Automation:** Build and maintain critical security tooling and automation, leveraging **AI/LLM tools** (like Linear Agent, Claude, Codex) to accelerate triage, code review, and repetitive investigation, enabling the program to scale efficiently without linear headcount growth.
**Collaborate with GRC/Trust:** Partner with GRC/Trust functions by integrating real findings into the risk register and control evidence, ensuring compliance requirements accurately reflect our engineering practices.
**Hands-on & Technically Proficient:** You're adept at reading and reasoning about code (a strong understanding of **TypeScript** is a significant plus). You're comfortable navigating **cloud environments (GCP experience preferred)** and can dive deep into a finding rather than simply delegating a ticket. You're proactive in using **AI coding/security tools** as force multipliers.
**Calm Under Pressure:** You possess the composure and leadership to guide an incident from initial alert through postmortem, instinctively knowing the next steps.
**A Builder at Heart:** You're driven to automate, preferring to write a script or ship a tool rather than repeatedly perform a manual process.
**Pragmatic Risk-Reducer:** Your focus is on tangible risk reduction and impact, not merely checking boxes or maximizing finding counts.
**Autonomy-Oriented:** You thrive with significant independence, confidently setting priorities and knowing precisely when to escalate.
**A Clear Communicator:** You can effectively explain complex technical findings to non-technical stakeholders and document them in a clear, actionable manner.
Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We champion deep focus and asynchronous collaboration, balanced with intentional in-person connections through team off-sites, optional co-working opportunities, and occasional travel.
This is a truly hands-on security engineering role. You'll be deploying and managing tools, reading and writing code, building sophisticated detections, working directly within our cloud environment, and partnering closely with our product engineers. Our robust stack is fronted by **Cloudflare** and runs on **Google Cloud** with **k8s, Postgres, and Node**.
For day-to-day collaboration and engineering tasks, we leverage:
Claude and ChatGPT for general and engineering-specific AI tasks
Vanta for compliance automation and evidence collection
RunReveal
SentinelOne
Join a small, focused team deeply committed to the quality of our work and the well-being of our people. Here's a glimpse of what you can expect:
Employee-friendly equity terms, including early exercise in the US and extended exercise windows
Daily meal and coffee stipend on every workday
Paid co-working space or desk setup allowance
Comprehensive health coverage (based on country requirements)
5 weeks paid vacation, plus local statutory holidays
4 months paid parental leave
Paid month off after 4 years of service & every 2 years thereafter
Regular team events and inspiring off-sites
Remote-first environment with no required commute
Our hiring process: How we hire at Linear
How we work: Designing remote work at Linear
Why and how we do work trials Linear blog post
How we use AI in design feature of Linear's design team
Scaling our real-time sync engine talk by our cofounder, Tuomas Artman, at Linear's 2023 offsite
Our recent tender offer: Sharing Linear’s growth with the people building it