Staff Security Engineer

The posting, as Mixpanel wrote it

About Mixpanel

Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the products they build. By combining powerful analytics with AI that knows your business, Mixpanel helps teams see what’s working, diagnose what’s not, and decide what to build next. Learn more at mixpanel.com .

About the Role

Mixpanel's Information Security & Risk Management (ISRM) team is hiring a Staff Security Engineer to partner with our product and engineering teams on how we build and run Mixpanel securely. You'll help design and implement security features in our product, set the security approach for how we adopt and build with AI, and lead the work to reduce existing risk in our engineering environment through lasting, platform-level solutions rather than one-off fixes. This is a hands-on technical role: you'll review designs, harden systems and pipelines, and build the kind of trust with engineering and product leaders that makes security part of how they plan and ship.

Responsibilities

• Secure product design: Partner with product managers and engineers from the start of new initiatives to threat model, review designs, and define security requirements before code is written.
• Security feature implementation: Design and build security features alongside product teams, such as SSO and SCIM, fine-grained access controls, audit logging, and encryption and key management, guiding engineers through implementation and validating the result.
• Strategic risk remediation: Identify systemic risks in our engineering environment, prioritize them by impact, and lead multi-quarter efforts that remove whole classes of issues through secure defaults, shared libraries, and guardrails.
• Infrastructure and Kubernetes security: Define and drive adoption of security baselines for our cloud and Kubernetes environments, including RBAC, network policies, pod security standards, workload identity, secrets management, and admission control.
• AI security: Set the security approach for how Mixpanel adopts and builds with AI. Threat model AI-powered product features and agentic workflows for risks such as prompt injection, data leakage, and over-permissioned agents, define guardrails for internal use of AI coding tools, agents, and MCP integrations, and review new AI vendors and integrations with engineering, IT, and legal partners.
• Secure development lifecycle: Harden each stage of our SDLC, from design and code review through build, release, and deployment. Own the security configuration of our GitHub organization and CI/CD pipelines, including access controls, branch protection, GitHub Actions permissions, secret scanning, dependency and code scanning, and software supply chain controls, in a way engineers will use rather than work around.
• Secrets management strategy: Define and drive Mixpanel's secrets management strategy across applications, CI/CD, cloud, and Kubernetes. Centralize

[…]
hieve far greater impact than any of us could accomplish alone.

• Candor with Connection: We build meaningful relationships that enable honest feedback and direct conversations.
• Champion the Customer: We seek to deeply understand our customers’ needs, ensuring their success is our north star.
• Powerful Simplicity: We find elegant solutions to complex problems, making sophisticated things accessible.

Why choose Mixpanel?

We’re a leader in analytics with over 29,000 customers and $277M invested from prominent investors: like Andreessen-Horowitz, Sequoia, YC, and, most recently, Bain Capital. Mixpanel’s pioneering event-based data analytics platform offers a powerful yet simple solution for companies to understand user behaviors and easily track overarching company success metrics. Our accomplished teams continuously facilitate our expansion by tackling the ever-evolving challenges tied to scaling, reliability, design, and service. Choosing to work at Mixpanel means you’ll be helping the world’s most innovative companies learn from their data so they can make better decisions.

Mixpanel is an equal opportunity employer supporting workforce diversity. At Mixpanel, we are focused on things that really matter—our people, our customers, our partners—out of a recognition that those relationships are the most valuable assets we have. We actively encourage women, people with disabilities, veterans, underrepresented minorities, and LGBTQ+ people to apply. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity or expression, sexual orientation, age, marital status, veteran status, or disability status. Pursuant to the San Francisco Fair Chance Ordinance or other similar laws that may be applicable, we will consider for employment qualified applicants with arrest and conviction records. We’ve immersed ourselves in our Culture and Values as our guiding principles for the impact we want to have and the future we are building.