Senior Information Security Engineer

Senior Information Security Engineer

The Security Posture Management (SPM) team is responsible for maintaining and continuously improving LinkedIn's security baseline across infrastructure. We provide a unified, data-driven view of security posture spanning on-premise systems, cloud environments, container platforms, endpoint devices, and the external attack surface. Through scalable automation, continuous monitoring, and a centralized security posture platform, SPM enables early detection of security risks, drives measurable risk reduction, and supports compliance with internal standards and external regulatory obligations. Our work empowers infrastructure owners and partner security teams with clear visibility, prioritization, and actionable insights to reduce exposure and strengthen LinkedIn's overall security resilience.

Responsibilities:

• Assess new and existing applications and system deployments for vulnerabilities and design flaws and prioritize remediation efforts based on risk.
• Research threats and attack vectors that impact LinkedIn's infrastructure.
• Engage with Product, Infrastructure and Engineering teams to implement security controls.
• Build, maintain and enhance vulnerability scanning capabilities to detect security vulnerabilities.
• Devise and bolster defenses through secure-by-default frameworks, architectures, and processes.
• Design and implement custom solutions that can identify and help mitigate security vulnerabilities at scale.
• Maintain and build improvements to systems supporting supply chain assurance.
• Evaluate new products and technologies to improve infrastructure security across LinkedIn.
• Respond to external vulnerability reports and incidents when required.
• Educate and advocate for security improvement throughout the LinkedIn ecosystem through mentorship and coaching.

Basic Qualifications:

• 4+ years' experience with infrastructure security, authentication and security protocols, cryptography, supply chain security and network security.
• 4+ years' experience in security assessment methodologies such as threat modeling, design reviews, penetration testing and vulnerability assessment.

Preferred Qualifications:

• Experience with security research, bug bounty and CTF competitions.
• Experience with CI/CD pipelines, CSPM and system hardening.
• Ability to work across teams and communicate concisely and clearly to stakeholders.
• Experience designing and implementing tooling that detects and mitigates security vulnerabilities.
• Experience with programming languages such as GoLang, Python, Rust or Java.

Suggested Skills:

• Application and Infrastructure Security.
• Penetration Testing of applications, cloud infrastructure, and systems components.
• Software development using Python, Go, Rust or Java.
• Threat modeling and risk assessments.