Senior Security Software Engineer - Cloud Infra Security

📋 Description

• • Own and evolve the security architecture for StubHub’s global, cloud-native ticketing platform that serves millions of fans and thousands of partners every month. You will design, build, and harden the infrastructure that keeps customer data, payment flows, and event inventory safe from emerging threats.
• • Lead threat-modeling sessions with engineering, product, and data teams to surface risks early in the SDLC. Translate findings into concrete security controls, automated guardrails, and policy-as-code that scale across AWS, GCP, and Kubernetes environments.
• • Develop and maintain security-critical services such as secrets management, workload identity, runtime container scanning, and network micro-segmentation. You will write production-grade Go, Python, or Rust and shepherd your code through peer review, automated testing, and phased roll-outs.
• • Instrument comprehensive observability for security events—think Falco, AWS GuardDuty, and custom detectors—then tune signal-to-noise ratios so that alerts are actionable. Build self-healing runbooks and on-call rotations that keep MTTR low without burning out the team.
• • Drive the adoption of zero-trust principles across service-to-service communication, CI/CD pipelines, and developer laptops. You will create lightweight abstractions that make the secure path the easy path for 400+ engineers.
• • Partner with compliance, legal, and privacy teams to map regulatory requirements (PCI-DSS, SOX, GDPR, CCPA) to technical controls. Automate evidence collection and continuously validate posture so audits become a non-event.
• • Mentor junior security engineers and run internal “purple-team” exercises that turn theoretical attacks into practical learning moments. Champion a culture where security is everyone’s responsibility, not a gate at the end.
• • Influence the broader technology strategy by publishing post-mortems, presenting at guild meetings, and contributing to open-source security projects. Your work will directly impact StubHub’s reputation and bottom line as we expand into new markets and verticals.
• • Stay ahead of the curve by evaluating bleeding-edge tooling—from eBPF runtime security to confidential computing—and making build-vs-buy recommendations grounded in risk, cost, and operational overhead.
• • Own OKRs that tie security outcomes to business value: reduce critical vuln lead-time by 50 %, cut cloud IAM blast-radius by 75 %, achieve 99.9 % uptime for security services, and shrink annual pentest findings to near-zero.