- Location
- United Kingdom
- Department
- Security
- Seniority
- Senior
- Source
- Greenhouse
Description
Mattermost is the secure collaboration platform trusted by Global organizations. Our platform runs on-premises, cloud, and in air-gapped environments, enabling mission-critical workflows from the tactical edge to the enterprise HQ, where data sovereignty and operational security are non-negotiable.
We are hiring a Senior Security Engineer to protect the people, infrastructure, and tooling that goes into building and hosting Mattermost. This is a hands-on, high-impact role at the intersection of enterprise security engineering, cloud information security, and AI-enabled threat response.
Why Join Mattermost
- Fully remote, globally distributed team | no commute, genuine flexibility
- Be a key voice in shaping and delivering security strategy
- Competitive salary, equity, and benefits with meaningful work attached
The Role
As a Senior Security Engineer, you will lead the design and implementation of security tooling, harden our cloud and IT infrastructure, and serve as a key responder to incidents. You will work across a globally distributed team and partner closely with Engineering to manage AI-enabled risk.
Key Responsibilities
- Lead security and IT projects to enhance the security posture of infrastructure and the company
- Detect, investigate, and remediate security incidents using SIEM, EDR, and SOAR tooling (e.g. CrowdStrike, SentinelOne)
- Conduct threat hunting across cloud and endpoint environments using a Zero Trust framework
- Administer company-wide IAM and security monitoring infrastructure
- Contribute to security policies, incident response, forensics, and endpoint management programmes
- Partner with Engineering to assess and mitigate risks from AI-enabled tools and workflows
- Explore and implement AI/automation in detection, analysis, and response pipelines
- Engage closely with North American and international staff across time zones
Required Background & Skills
- Bachelor’s degree in Computer Science or a related field, or significant professional security experience
- 3+ years of hands-on experience in security engineering and incident response
- Experience with SIEM platforms and security monitoring systems
- Experience with EDR tools such as CrowdStrike or SentinelOne
- Knowledge of SOAR platforms and automation of security workflows
- Familiarity with Zero Trust architecture principles and threat hunting methodologies
- Experience with cloud security controls across AWS, GCP, and/or Azure
- Strong knowledge of Linux systems and Kubernetes/Docker environments
- Experience with IAM solutions and infrastructure automation
- Practical experience evaluating security implications of AI systems and AI-assisted workflows
- Experience managing security of Microsoft 365 and Google Workspace tenants
- Excellent written and verbal communication skills
Preferred Background & Skills
- Experience with certification processes: SOC2, ISO 27001, FedRAMP, or Cyber Essentials Plus
- Certifications: OSCP, GCIH, GCFA, or equivalent penetration testing / incident response credentials
- Experience in Go or Python
- Background in open-source communities
- Endpoint security management experience in a fully remote organisation
Export Control & Eligibility
This role may involve access to information subject to U.S. export control regulations (EAR/ITAR). Applicants should be aware that eligibility requirements may apply. We encourage candidates with questions about this to reach out. Many UK-based security professionals with defence backgrounds will qualify. We are happy to discuss your specific situation.
Mattermost takes a market-based approach to pay and pay may vary depending on your location. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future.
