Lead Security Engineer

About the role

Buffer is a fully distributed company that builds social media and brand-building software. This role leads Buffer's security team as the tech lead, owning security strategy, incident response, and compliance for the organization.

What you'll do

• Define the security strategy, roadmaps, and priorities for Buffer
• Ship security tooling, automation, and processes with the engineering team
• Integrate security into the development lifecycle, including threat modeling and dependency hygiene
• Lead security incidents, drive tabletop exercises, and coordinate on-call responses
• Secure the AI surface and manage guardrails for safe AI-enabled features
• Own compliance programs and assist with security questionnaires and audits

What they're looking for

• Hands-on security leadership with experience in incident management and security operations
• Proven ability to define strategy, drive execution, and collaborate with product and engineering teams
• Experience with SOC 2, vendor risk, and compliance programs
• Strong emphasis on building secure systems and automating security tasks
• Comfort with a generalist security role and working in a high-trust, low-structure environment
• Experience with AI security considerations and threat modeling for AI-enabled products

For applicants in Nigeria

• The listing states a timezone range of UTC-3 to UTC+3; confirm whether this applies to Nigeria before interviewing
• Remote role with no explicit on-site requirement; the listing mentions global hiring; verify work authorization if needed
• Pay currency and salary range are not stated in the listing; confirm during interview process