Principal Security Engineer at Buildkite

We are redirecting you to the source. If you are not redirected in 3 seconds, please click here.

Principal Security Engineer at Buildkite. Location Information: Australia, New Zealand. . Join Buildkite, where we help developers create faster, test smarter and innovate beyond limits. . We’re shaping the future of Scale-Out Delivery Platforms that is trusted by the worlds biggest tech companies. . 🌏 Remote . . 🏝️ 6 weeks vacation. . 🖥️ Generous tech and home office budgets. . 👶🏻 6 months paid parental leave. . 🏢 Co. working space budget. . 🍰 Equity opportunities. . 🧘 Healthcare and wellness . At Buildkite, our mission is to unblock every developer on the planet. We’ve rethought how software delivery should work and have built a platform that is fast, reliable, secure, and scalable to meet the needs of the most demanding high-growth tech companies globally, including Airbnb, Shopify, PagerDuty, and Lyft.. . We’re looking for a Principal Security Engineer to lead the next chapter of security at Buildkite as an integral part of the Platform team. This is a high-impact senior individual contributor role where you’ll define and drive our long-term approach to security across people, systems, and product. . . You will partner closely with engineering and company leadership to build a scalable, strategically-aligned security capability: one that supports autonomy, enables growth, and protects what matters most. You’ll work across teams, mentor others, and bring clarity and confidence to how we manage risk as we scale.. . What You’ll Do. . 🛡️ . Drive Security Strategy and Leadership. . . Define and lead Buildkite’s long-term security strategy, evolving our approach in partnership with Engineering Ops and company leadership. . Define and maintain our security roadmap, balancing strategic uplift with pragmatic risk management and org-wide alignment. . Define technology, people, and process requirements to meet our security goals and lead the implementation of key initiatives. . Design scalable, values-aligned security policies, frameworks, and processes that support a secure-by-default culture and enable team autonomy with accountability. . Embed security into engineering, product, and operational workflows, partnering across teams to ensure strong alignment and impact. . Uplift security capability across the business, mentoring engineers and sharing knowledge to grow maturity and confidence. . . ⚡ . Operational Security and Risk Management. . . Lead and evolve security operations, including proactive monitoring, incident readiness, and continuous improvement of detection and response. . Own and evolve our security . incident response. plans and processes as part of our broader incident management approach, ensuring we can detect, investigate, respond to, and learn from security incidents effectively. . Identify and drive remediation of complex vulnerabilities across infrastructure, applications, and third-party integrations. . Champion a secure-by-design mindset across engineering, embedding practices that scale with our growth and reduce organisational risk. . . 📊 . Governance, Reporting, and Influence. . . Establish executive-level security reporting, including dashboards and insights to support informed decision-making across leadership and the board. . Act as a visible, trusted advisor and thought partner, helping teams navigate challenges and make confident, risk-aware decisions. . Stay ahead of emerging risks and evolving needs, shaping strategy and driving resilience for the long term. . Foster a culture of learning, inclusion, and shared ownership, contributing to psychological safety and continuous improvement across teams. . . . . 🎨 Skills and Experience You Bring. . Security Expertise. . . Experience leading security programs in startups or scale-ups, with proven delivery across complex environments. . Strong understanding of security and compliance frameworks and best practices (e.g. NIST CSF, SOC 2, CIS Benchmarks, OWASP). . Experience working directly within operations and/or development teams. . Proficient in managing . SIEM. and/or SOAR platforms, with deep incident management skills. . Familiar with infrastructure, network, and application security in cloud environments (e.g. AWS). . Able to recommend and design secure solutions aligned with business and engineering needs. . . Additional Experience We’d Value. . . Experience in a range of security roles in startups or scale-ups . . Programming experience in Ruby or Go. . Experience with Terraform or other Infrastructure as Code tools. . Familiarity with software development practices such as source control and CI/CD pipelines. . Security certifications in operations, cloud, or governance. . Experience in a SOC or MSP/MSSP environment. . 3+ years working with AWS and 5+ years in operational security roles. . . Collaboration and Communication. . . People-first mindset when solving security challenges, balancing pragmatism with strong risk awareness. . Excellent written and verbal communication skills, with the ability to explain security concepts to both technical and non-technical audiences. . Comfortable working remotely, with strong independence, proactivity, and attention to detail. . . . . Why Join Buildkite?. . At Buildkite, we value kindness, autonomy, and collaboration. You’ll be joining a remote-first company where your work directly helps some of the world’s best engineering teams build and ship software faster and more safely. This is a chance to take on meaningful technical challenges, shape the future of our CI/CD platform, and improve the experience of thousands of developers every day.. . You’ll also have access to a range of benefits designed to support you in doing your best work.. . Equal Opportunity Employer. . At Buildkite, we value diversity and celebrate all types of skills, backgrounds, and experiences. We’re dedicated to fostering an inclusive environment and providing reasonable accommodations throughout our recruitment process.. . If you need any accommodations or support during the application or interview process, please reach out to us at [email protected].. Buildkite is a differently shaped company that values work-life balance and supports staff to work the ways that make sense for them. From the beginning, our goal has been to build a company that is people-centered, supportive and just a little bit weird 💚. .