Senior Security Engineer - Application/Cloud at Nextdoor
San Francisco, CA, US

Nextdoor is the neighborhood hub for you, your neighbors and the broader local community. Nextdoor’s purpose is to cultivate a kinder world where everyone has a neighborhood they can rely on.

Building connections in the real world is a universal human need. That truth, and the reality that neighborhoods are one of the most important and useful communities in our lives have been guiding principles for Nextdoor. Today, neighbors rely on Nextdoor in neighborhoods around the world in the United States, the United Kingdom, Germany, France, the Netherlands, Italy, Spain, Sweden, Denmark, Australia and Canada, with many more to come.

Meet your Future Neighbors

At Nextdoor, we believe in the transformative power of community, and our members use their real identities to connect with people and businesses around them.  Protecting our members’ trust is core to what we do.  The Information Security team at Nextdoor manages all things Security-related, partnering with engineering, product, legal, and HR to protect Nextdoor members and data.

The Impact You’ll Make

As Senior Security Engineer, you will design, plan, and execute initiatives to protect the Nextdoor platform (web, mobile, and cloud infrastructure) from attack and abuse.  You will ensure the privacy of Nextdoor member data and resilience against cyberattacks.  You should be a hands on, collaborative leader that can balance the needs of security with a fast moving, agile business.

You will be a critical thought leader in securing the Nextdoor platform. You should be excited to bring your experience and expertise every day in order to: 

Partner with product and engineering teams to educate developers, design for security, and ensure resilience against attack and abuse.

Implement automated security testing to proactively detect and mitigate vulnerabilities.

Manage Nextdoor’s bug bounty program.

Participate in security incident response, planning, and table top exercises.

Assess vendors, partnerships, and technology integrations to protect Nextdoor systems and data.

What You’ll Bring to The House

5+ years hands-on technical experience in information security, software development, and cloud.

Expertise applying security principles to cloud native environments (AWS, containerization, and microservices).

Experience implementing automated security testing as part of a CI/CD pipeline.

Proficiency in Python, Java, or Go.

Enthusiasm for community enrichment and Nextdoor’s core values.

Bonus Points

Security and cloud certifications including: GIAC Certified Web Application Defender (GWEB), ISC2 Certified Software Security Lifecycle Professional (CSSLP), AWS Solutions Architect, AWS DevOps Engineer, and AWS Security Specialty.

Experience leading developer security awareness and education programs.

Familiarity with GDPR security requirements.

Automation experience in Puppet, Terraform, Ansible, or similar