Software Engineer: Information Security - Remote

Overview

PlanetScale is growing rapidly and reinventing the database space. The PlanetScale platform offers both Postgres and Vitess clusters. Vitess, an open-source database clustering system for horizontal scaling of MySQL, enables businesses to efficiently handle large-scale data workloads — without sacrificing developer experience.

Our customers entrust us with what is often their most precious digital asset, their data, so the stakes couldn't be higher. We're looking for a Software Engineer: Information Security to join our team and help us build security into every layer of our database infrastructure while maintaining our exceptional developer experience.

In Short

• You will design and implement security controls for PlanetScale's cloud-native database platform, protecting millions of queries per second for some of the world's largest applications.
• You will collaborate with engineering teams to conduct security reviews, threat modeling, and provide secure coding guidance across our distributed systems.
• You will evaluate, procure, and implement proactive security tools and technologies to strengthen our security posture.
• You will work closely with our compliance team to ensure adherence to SOC 2, PCI DSS, and other security frameworks.
• You will build security automation and tooling to scale security practices across the engineering organization.
• You will respond to security incidents and conduct post-incident reviews to improve our security resilience.

Requirements

• 5+ years of software engineering experience with a focus on security engineering or application security.
• Strong proficiency in Go, with experience in other languages like Python, Java, or C++.
• Experience securing cloud-native applications and infrastructure (AWS, GCP, Azure).
• Knowledge of database security, encryption, and access controls.
• Experience with security frameworks and compliance requirements (SOC 2, PCI DSS).
• Understanding of threat modeling, security architecture, and secure coding practices.

Benefits

• Experience with database internals, distributed systems security, or infrastructure security.
• Background in security tool evaluation, implementation, and automation.
• Experience with Kubernetes security, container security, and cloud security posture management.
• Knowledge of security monitoring, incident response, and vulnerability management.
• Previous experience at a high-growth technology company or in a security engineering role.
• Relevant security certifications (CISSP, CISM, CEH, etc.).