Security Engineer

The posting, as Patreon wrote it

Patreon is a media and community platform where over 300,000 creators give their biggest fans access to exclusive work and experiences. We offer creators a variety of ways to engage with their fans and build a lasting business including: paid memberships, free memberships, community chats, live video, and selling to fans directly with one-time purchases.

Ultimately our goal is simple: fund the creative class. And we're leaders in that space, with:

• $10 billion+ generated by creators since Patreon's inception
• 100 million+ free memberships for fans who may not be ready to pay just yet, and
• 25 million+ paid memberships on Patreon today.

We're continuing to invest heavily in building the best creator platform with the best team in the creator economy and are looking for a Security Engineer to support our mission.

This role is Fully Remote (US only), or can be based in New York or San Francisco (where it is open to those who are able to be in-office 3 days per week on a hybrid work model.)

About the Team

Patreon’s security team works to protect Patreon creators and their fans. The team deals with all facets of Patreon’s security, including application security, infrastructure security, and internal/corporate security. We’re a small but effective team. We write code to solve security problems and work closely with our partners across the engineering organization. We also understand the importance of balancing security risks against business needs. We strive for honest and effective communication and focus on pragmatically reducing risk over checking boxes. The security team is part of Patreon’s Risk Engineering org, which also includes our Safety Engineering and Identity and Access teams. Collectively, the risk org tackles a range of problems including content moderation, internal tooling, identity verification, access control, and account security.

About the Role

In this role, you’ll be a member of our Security team. You’ll split your time between contributing to security projects and responding to security investigations, vulnerabilities, or questions. The work spans application security, infrastructure security, and internal/corporate security. It includes both proactive and reactive security work. You’ll be part of an on-call rotation and help respond to security incidents and investigations. You’ll write code – both to support security work and to improve the security of the Patreon platform. You’ll work closely with other members of the security team, the wider Risk engineering org, and cross functional partners in engineering, legal, and IT. Your work will help reduce known risks and will protect the security, privacy, and trust of Patreon creators and their fans.

What you’ll need

• You have two or more years of experience reducing security risks in the application, infrastructure, or corporate security spaces. You can create a threat model and to explain why a given risk matters and what we might do to reduce it.

[…]
We sign our name to every deliverable, just like the creators we serve.

• Make it Happen | We don’t quit. We learn and deliver.
• Win Together | We grow as individuals. We win as a team.

Patreon is proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class. If you need a reasonable accommodation during the interview process, please let us know via email at accommodations@patreon.

Patreon offers a competitive benefits package including and not limited to salary, equity plans, healthcare, flexible time off, company holidays and recharge days, commuter benefits, lifestyle stipends, learning and development stipends, patronage, parental leave, and 401k plan with matching.

Patreon operates under a hybrid work model, where employees based in office locations are expected to come into the office three days per week, excluding sick time and paid leave. The goal of this policy is to be intentional about the in-person time we spend together to strengthen the feeling of community at Patreon. Candidates hired into remote-eligible roles are not expected to meet the same requirements.

At Patreon, we believe in fair and transparent pay. In compliance with New York and California pay transparency laws, we are sharing the expected salary range for this role.

The posted salary range is dependent on the location and the level. This range may encompass multiple levels within the role’s job family. The final offer will be based on candidate’s experience, skills, competencies, and geographic location, aligning with the appropriate job level within Patreon’s leveling framework. For remote employees located outside CA and NY, salary may vary based on location and local market conditions.

Patreon reserves the right to modify or update compensation and benefits at any time.