Security Engineer, Platform

About the role

Resend is looking for a Security Engineer to own and evolve the security foundations of its platform. You will work remotely with a fast‑growing team that serves over 4 million developers, ensuring that APIs, secrets, and access controls are secure by design.

Key responsibilities

• Build and improve security foundations such as API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls.
• Design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines.
• Enhance detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events.
• Review and update processes and pipelines to embed security rather than add it as an afterthought.
• Continuously raise the overall security bar across the organization.

Required profile

• Proven experience securing production infrastructure, cloud environments, APIs, or multi‑tenant SaaS products.
• Ability to write and read application, infrastructure, and deployment code.
• Deep understanding of authentication, authorization, IAM, logging, audit trails, incident response, and secure deployment pipelines.
• Self‑directed, able to prioritize as the first dedicated security hire, and prefers practical improvements over heavy processes.

Required skills

• AWS
• Terraform
• Kubernetes
• Cloudflare
• GitHub organization hardening
• SOC 2, ISO 27001, GDPR compliance knowledge
• Email security standards such as SPF, DKIM, DMARC

What we offer

• Autonomy to “just ship it” with ownership of problems and solutions.
• 100 % remote work with flexible schedules and occasional travel for off‑sites and conferences.
• Modern tech stack including Next.js, Raycast, and Notion.
• Honest, low‑ego team culture focused on developer experience.
• Compensation ranging from $140,000 to $160,000 USD per year.