Staff Security Engineer
CodeRabbit is an AI software-development platform for reviewing, prioritizing, understanding, and securing code changes created by people and coding agents.
Funding history
About CodeRabbit
CodeRabbit provides automated, context-aware AI code reviews across pull requests, IDEs, and CLI workflows, and has expanded into agentic change management with PR triage, change explainability, security monitoring, planning, and Slack/Discord agents.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will set technical direction and lead hands-on security work across products, cloud infrastructure, identities, and AI systems. You will turn security risks into prioritized engineering work, develop secure architecture and controls, investigate incidents, conduct authorized assessments, and mentor engineers.
Requirements
- 8+ years of relevant security engineering experience or equivalent demonstrated depth and impact
- Cloud and infrastructure security experience, including Kubernetes, networking, secrets management, key management, and infrastructure as code
- Expertise with at least one major cloud provider; GCP experience is particularly relevant
- IAM expertise across workforce and workload identities
- Experience building security detections, using SIEM and cloud audit telemetry, and investigating incidents
- Application and offensive security skills
- Programming and automation skills
- Ability to analyze attack chains and system trust boundaries
- Ability to influence architecture, mentor engineers, and deliver cross-functional improvements
- Clear written and verbal communication
Responsibilities
- Define and drive the technical security roadmap
- Lead threat modeling and security architecture reviews
- Improve security for GCP, GKE Kubernetes, serverless workloads, and infrastructure as code
- Lead identity and access management improvements
- Build and operate security detection capabilities
- Lead technical incident response
- Plan and execute authorized offensive assessments and red-team exercises
- Assess AI and agentic-system risks
- Build security tooling and automation
- Improve vulnerability management and responsible-disclosure triage
- Mentor engineers and lead cross-team technical decisions
- Partner with compliance teams on documented controls
Benefits
- Equity
- Benefits