Senior Information Security Engineer

About Mixpanel

Mixpanel is an event analytics platform for builders who need answers from their data at their fingertips—no SQL required. When everyone in the organization can see and learn from the impact of their work on product, marketing, and company revenue metrics, they are poised to make better decisions.

Over 9,000 paid customers, including companies like Netflix, Pinterest, Sweetgreen, and Samsara, use Mixpanel to understand their customers and measure progress. Our commitment is to provide the most comprehensive and reliable analytics platform accessible and trusted by all.

About the Information Security Team

We believe security isn't just a function—it's a platform for bold ideas. The Information Security Team at Mixpanel is a small, high-impact group committed to building a frictionless security program that serves as a model for our company and the broader industry. This is a team for those who are never satisfied, who dream big, and who have the resilience to see those ideas through.

We operate at the intersection of business strategy and technical execution, where we are critical partners to every team at Mixpanel. Our work requires a broad, generalist skill set across vulnerability management, threat detection, and access management. We strategically balance necessary compliance work with proactive initiatives, with a constant focus on automation as the path to a more efficient security program.

We use our expertise in a variety of well-known security platforms and tools to create seamless, automated processes that empower our peers. We are a lean team by design, and we succeed or fail together, committed to transparent communication and a strong sense of ownership.

About the Role

The ideal candidate is a highly autonomous, senior engineer who will take charge of their career by solving our most pressing challenges. You will serve as the go-to domain expert for our vulnerability management program while actively contributing to the hands-on work in a variety of other critical areas, including on-call rotations, DLP, IAM, and SOC. This is not a maintenance role. It is a unique opportunity for a passionate visionary to define the future of security at Mixpanel.

Responsibilities

• Define and own the Product Security strategy, working hand-in-hand with engineering teams to orchestrate security testing of new features and lead the triage and mitigation of vulnerabilities from tools like HackerOne, Detectify, and GitHub Advanced Security.
• Serve as a security Subject Matter Expert (SME), providing consultation and guidance to internal teams and directly with customers to ensure business solutions are secure.
• Proactively anticipate emerging security requirements and recommend new policies, procedures, and controls that address potential threats and maintain our security posture.
• Develop and lead secure software development training to enable Product and Engineering teams to improve their security practices.
• Work directly with senior leadership to report on domain performance, communicate security metrics, and manage project planning and execution.

We're Looking For Someone Who Has

• A track record of 5+ years of experience as a security engineer, with a focus on defining and driving security initiatives within an engineering-centric organization.
• A proven ability to provide technical leadership and mentor other engineers, acting as a force multiplier for the team and beyond.
• Extensive experience with the secure software development lifecycle, including a deep understanding of security best practices, and a history of advocating for them with engineering and product teams.
• The ability to translate strategic ideas into mature projects, leveraging scripting, automation, and a variety of GenAI platforms (e.g., Gemini, ChatGPT, Claude) to build innovative solutions.
• A deep knowledge of the Product Security domain, with a strong generalist background and hands-on experience in other core security areas.
• A history of driving security outcomes by collaborating effectively with engineering, product, and senior leadership.

Bonus Points For

• Experience with designing and implementing next-generation security technologies, such as SASE, CASB, or RASP.
• Hands-on experience with application patch management, software supply chain security, or artifact repositories like JFrog and Snyk.
• A background working at a SaaS company, with extensive experience in data analytics and the Google enterprise security stack (GCP and Google Workspace).
• Experience with multiple-control frameworks, incl