Hands-on Security Engineer responsible for building and automating security controls across product, backend, and infrastructure; conducting vulnerability assessments and pen tests; triaging bug bounty reports; patching backend issues; supporting incident response; and partnering with engineering to improve secure coding and infrastructure practices.
Fireflies.ai is the leading AI teammate for meetings, trusted by more than 20 million users across over 500,000 organizations, from fast-growing startups to Fortune 500 enterprises. Fireflies captures knowledge, automates repetitive work, and helps teams become more productive before, during, and after every meeting.
Fireflies has achieved unicorn status with a valuation exceeding $1 billion. In 2024, Ramp recognized Fireflies as the sixth most popular AI platform by number of paying customers, alongside companies including OpenAI, Midjourney, and Anthropic. There is a good chance you have already seen Fireflies quietly powering one of your recent meetings.
Fireflies.ai is looking for a hands-on Security Engineer to protect our infrastructure, product, and user data as we scale globally. This role is ideal for someone who can ship code, automate security workflows, triage vulnerabilities, and work closely with engineering teams to build secure systems.
We are an AI-native engineering organization. Our strongest engineers use coding agents to move faster, run work in parallel, and compound what the team learns, while remaining fully accountable for the architecture, code, testing, security, and customer outcome. We want engineers who combine speed with judgment, communicate clearly in an async environment, and consistently turn ambiguous problems into reliable products.
- Build and improve security controls across our product, backend, and infrastructure.
- Review code, architecture, and infrastructure for security risks.
- Run vulnerability assessments, penetration testing, and security audits.
- Debug and patch security issues in backend systems.
- Manage bug bounty triage and remediation workflows, including HackerOne.
- Automate security checks, alerts, and vulnerability workflows.
- Partner with engineering teams to promote secure coding practices.
- Support incident response and security investigations.
- Configure and maintain security tools such as firewalls, IDS/IPS, scanners, and monitoring systems.
What You Need:
- 3+ years of experience in security engineering, backend security, or infrastructure security.
- Strong backend development experience with Node.js/TypeScript.
- Ability to ship code end-to-end.
- Good understanding of authentication, authorization, cryptography, and common vulnerabilities.
- Experience with security tools such as GitHub Advanced Security, Dependabot, CrowdStrike, Falco or similar.
- Experience with cloud security, preferably GCP or AWS.
- Familiarity with Kubernetes, Docker, and modern infrastructure security.
- Strong problem-solving and communication skills.
Nice to Have:
- Experience with SaaS or high-growth startup environments.
- Bug bounty program experience.
- Experience with SOC 2, HIPAA, GDPR, Vanta, or similar
- Contributions to the security community, such as CVEs, talks, or open-source work.
- Experience with DevSecOps or security automation.
Tech Stack:
- Node.js, TypeScript
- Go
- MongoDB
- Kubernetes, Docker
- GCP
- Pub/Sub architecture
- HackerOne, Vanta, GitHub Advanced Security
Values that are important to us:
- You should be a great communicator and culture maintainer
- Take a look at our culture document
- You're data-driven and customer-focused
- You value fast & incremental engineering cycles
- You maintain design excellence and minimize complexity
- You measure your results & automate when possible
- You get 10% better at something every week
- You have agency with your internal compass and take accountability & initiative
- We value overcommunication, candid feedback and a results-driven culture
Perks and Benefits:
- Competitive compensation
- Work remotely anywhere in your respective country
- Ability to move laterally within a team and grow rapidly
- Paid time off and flexible leave policy
- No boss culture
- Flexible working hours
- LGBTQ+ friendly
- Company offsites
- Tech reimbursements
At Fireflies.ai, we are changing how teams use AI in their daily work. Our culture champions security, innovation, customer experience, and growth. Backed by $19 million from investors including Canaan and Khosla Ventures, plus angels from Slack, Facebook, Dropbox, Amazon, and Salesforce, Fireflies is driven by a global team of more than 100 people across over 20 countries and every time zone. We are building a world-class, global-first company, and we use our own product to do it.
Fireflies.ai is an equal opportunity employer. We strongly value diversity because our team is stronger with different perspectives and experiences. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or any other protected characteristic.
Similar Jobs
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.
Top Skills:
AWSBuildkiteCi/CdClaudeGCPGoGrpcHTTPJavaJSONKotlinKubernetesLlm ApisModel Context ProtocolProtocol BuffersPythonRest ApisSnowflakeSQLTerraform
Artificial Intelligence • Fintech • Hardware • Information Technology • Sales • Software • Transportation
Conduct red team operations, adversary simulations, penetration testing, and offensive security assessments across cloud environments. Evaluate cloud infrastructure, IAM, CI/CD pipelines, containers, and cloud-native services; identify attack paths and configuration weaknesses; validate detection and response capabilities; track emerging attacker techniques; and drive remediation through concise reporting and stakeholder communication.
Top Skills:
Ci/Cd PipelinesCloud EnvironmentsCloud-Native ServicesContainerized WorkloadsIamMitre Att&Ck
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Conduct AI-driven security assessments across software, hardware, and firmware; develop AI-enabled offensive and defensive security tooling; identify and remediate vulnerabilities; test LLMs, agentic workflows, and cloud environments; and guide organization-wide AI security strategy. Partner with engineering and leadership, lead threat-modeling sessions, and communicate security findings and recommendations to senior stakeholders.
Top Skills:
Adversarial TestingAgentic WorkflowsAIApplication SecurityAWSEmbedded SystemsFirmwareGitGoLlmsOffensive SecurityPrompt InjectionRagThreat ModelingVulnerability Management
What you need to know about the Vancouver Tech Scene
Raincouver, Vancity, The Big Smoke — Vancouver is known by many names, and in recent years, it has gained a reputation as a growing hub for both tech and sustainability. Renowned for its natural beauty, the city has become a magnet for professionals eager to create environmental solutions, and with an emphasis on clean technology, renewable energy and environmental innovation, it's attracted companies across various industries, all working toward a shared goal: advancing clean technology.
