Site Reliability Engineer, Security

About the role

We're looking for Site Reliability Engineers to work on security across the entire Radar infrastructure. Radar is a high-throughput, data intensive application handling 1 billion+ API calls per day. Over the past year, Radar has been used from over 100M devices worldwide. This role will help us continually improve our security and compliance posture.

How we work:

Most of our engineering team are former technical co-founders or former Radar interns from schools like Waterloo and CMU. Most engineers at Radar fit one of two molds, technically: either Staff level expertise in one stack, or "Multi-Stack" at any level. We say "Multi-Stack" because "Full-Stack" has the connotation of "Frontend and Backend", but Radar Engineers might also work on Mobile or Data engineering. Not that you need to be an expert in all of those, but a desire to learn, jump around to different stacks, and get things done is the important part.

We care a lot about shipping fast and talking to customers. We're committed to our product vision of full-stack location infrastructure, but we also know that customer feedback is a treasure map to gold. Even though Slack is the brain of our company, working together in-person in our NYC HQ is the fastest way for us to get things done. We meet on Mondays to plan out work for the week in small groups and use Linear for planning. All projects are run by an Engineering lead, an executive and a Go-to-Market lead. Engineers figure out what to build, talk to customers, talk to prospects, help close them, get them live and make them successful.

One of our most important company values is "Walk a mile," as in walking a mile in the customer's shoes, but also as in literally walking a mile, getting up from your desk and developing a deep understanding of how location services behave in the real world. To us, a week is a long time, and we expect to ship big things every week.

The stack:

The frontend is React, the backend is TypeScript and Rust.

Everything is deployed to AWS via EKS.

We use SecurityHub for continual cloud monitoring against benchmarks.

We use Inspector and Qualys for endpoint and server vulnerability tracking.

We use GuardDuty for IDS.

We use Snyk and Github Advanced Security for code scanning and 3rd party lib vulnerability patching.

JAMF Protect and GuardDuty are used for anti-malware.

We use AlienVault for SIEM.

We use Hackerone for Pen Tests and Vulnerability Disclosure.

We use CIS for benchmarks.

We use Vanta for GRC.

We sponsor OpenStreetMaps, MapLibre, and OpenAddresses.

The hiring process:

After a brief call with our CTO, we'll invite you to our NYC HQ for an interview if we think there is a possible match. During that time we'll work on system design problems together and do some coding for 2 hours to build something simple. You might meet one of our co-founders and we'll also go into more depth about how we work to see if there is a match.

What you’ll do:

• Work on core Radar security infrastructure across the frontend, backend, mobile and cloud.

• Ensure Radar is generally following AWS best practices for security.

• Work on core our secrets management.

• Work on core S3 security

• Migrate our infra to OIDC keys wherever possible

• Keep packages up to date in Docker containers and instances based on known CVEs and our SLAs.

• Ship dependabot and Snyk auto-upgraded libraries.

• Investigate findings generated by our SIEM and GuardDuty.

• Triage and fix findings generated by Hackeone Pen Tests and Vulnerability Management Program.

• Monitor Security Hub cloud scanning and remediate findings.

• Keep server configuration up to date by leveraging CIS benchmarks.

• Rotate AWS keys.

• Review and remediate security groups and firewalls.

• Participate in Incident Response plans and tests.

• Participate in Risk Assessments and remediations.

• Participate in our SOC 2 program.

• Talk to Radar customers and prospects, hear their feedback, incorporate it into your work and make them successful

You should:

• Have experience working across several different security domains in large scale production applications.

• Are interested in talking to customers or prospects and making them successful.

Bonus points if you:

• Are a former technical co-founder

You’ll work with:

• Tim Julien , CTO

• Dai Shi , Senior Staff SRE

• Our customers and prospects

• Our Customer Success, Sales Engineering, and Sales teams

Benefits & Perks :

• Competitive compensation package, stock option grants, and a 401(k) plan with 4% employer match

• Medical, dental, and vision plans with 100% premiums covered, 12 weeks of paid parental leave, flexible spending accounts (FSAs), and more

• Unlimited PTO

• Fully stocked kitchen and weekly catered breakfast/lunch at our NYC office

• CitiBike and Wellhub (Gympass) memberships

• Monthly happy hours and team events

Benefits offering details will be provided if a candidate receives an offer. Benefits may also vary by location.

About Us

Radar is location infrastructure for every product and service. Companies like Vercel, Panera, and T-Mobile use Radar's geofencing SDKs and maps APIs to power location-based experiences across hundreds of millions of devices worldwide.

Founded in 2016, Radar is headquartered in New York, NY. Radar has raised $85.5M from leading venture capital firms including Accel and Insight Partners.

Compensation:

For candidates based in the United States, the base salary range for this full-time position is between $150,000 - $200,000/year with an opportunity for performance bonuses and incentives.

In addition to cash compensation, Radar offers full-time employees stock option grants under its equity plan. This is a meaningful ownership stake in the company we provide to our employees as we build a category-defining company.

Our salary ranges are determined by role, level, and location. The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Your exact offer may vary based on market location, job-related skills, experience, and relevant education or training.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.