Note: The job is a remote job and is open to candidates in USA. 1Password is a cybersecurity company building secure identity, application access, and device trust solutions for businesses. The Senior Security Engineer will lead product security incident response, mature the PSIRT and coordinated vulnerability disclosure functions, and develop AI-powered tooling, automation, and processes to improve detection and response. The role also coordinates cross-functional incident communications, conducts post-incident reviews, and mentors other engineers.
Responsibilities
- Lead end-to-end response to product security incidents, from discovery, triage, remediation, and disclosure
- Own and evolve 1Password's PSIRT function, including incident classification frameworks, severity models, escalation paths, and response playbooks
- Drive coordinated vulnerability disclosure (CVD) processes, partnering with our bug bounty program and external security researchers to manage responsible disclosure timelines and communications
- Serve as the primary coordinator across Product Security, Engineering, Legal, Communications, and Customer Success during active security incidents
- Lead post-incident reviews (PIRs) and translate findings into systemic improvements across our products, processes, and detection capabilities
- Develop and maintain incident response tooling, automation, and reporting that reduce time-to-detect and time-to-respond
- Contribute to customer-facing security advisories, CVE disclosures, and public incident communications in partnership with Legal and Communications
- Evaluate and integrate AI-powered tooling and workflows that improve the speed and effectiveness of incident detection and response
- Mentor other engineers and help shape the long-term maturity of our product security and incident response capabilities
- Serve on an on-call rotation with out-of-business-hours coverage
Skills
- 5+ years of career experience in IT or Engineering with a security focus
- Hands-on experience leading or participating in security incident response, ideally in a product or SaaS company context
- Experience with coordinated vulnerability disclosure (CVD) and managing relationships with external security researchers
- Strong judgment under pressure: you make clear, defensible decisions during time-sensitive situations with incomplete information
- Experience building or formalizing incident response capabilities from the ground up (playbooks, runbooks, severity frameworks, escalation processes)
- Experience drafting or contributing to customer security advisories, CVEs, or public-facing incident communications
- Strong communication skills across a wide range of audiences, from engineers to executives to customers
- Comfort reading and writing code to support forensic analysis, automation, and tooling
- Adaptable and resilient: you thrive in fast-paced environments where priorities can shift quickly
- Experience leveraging AI/ML capabilities to accelerate security workflows, automate repetitive tasks, or improve detection and response
- This is a remote opportunity within Canada and the US
- A proven builder: You've built something — an agentic evidence collection workflow, an AI-assisted vendor questionnaire reviewer, an LLM-powered control narrative pipeline — and you can walk through what you built, the choices you made, what you iterated on, and the measurable impact was
- Systems thinking: When you describe an automation you built, you can explain how it changed downstream workflows, not just what it saved on the immediate task
- Familiarity with CVSS, EPSS, and vulnerability severity frameworks as they apply to incident prioritization
- Experience in a consumer or B2B SaaS environment where customer trust and public perception are high stakes
- Familiarity with Software Bill of Materials (SBOMs) and supply chain risk as it relates to security incidents
- Experience with compliance standards and certifications (e.g., SOC 2, ISO 27001) and their intersection with incident reporting obligations
- Relevant certifications such as GCIH, GCFE, GCFA, PNPT, or similar (valued but not required)
Benefits
- Maternity and parental leave top-up programs
- Competitive health benefits
- Generous PTO policy
- RSU program for most employees
- Retirement matching program
- Free 1Password account
- Paid volunteer days
- Peer-to-peer recognition through Bonusly
- Remote-first work environment
- Health and dental benefits for USA-based roles
- 401k for USA-based roles
- An equity grant for USA-based roles
- Where applicable, participation in incentive programs for USA-based roles
- Health and dental benefits for Canada-based roles
- RRSP for Canada-based roles
- An equity grant for Canada-based roles
- Where applicable, participation in incentive programs for Canada-based roles
Company Overview
Company H1B Sponsorship