Security Engineer, Platform - Resend

Resend is growing fast, with over 4 million developers using the platform. As part of the Platform Squad, you will be responsible for the internal platform and reliability foundations that let Resend teams build, deploy, observe, and operate services safely.

This role is fully remote based in Americas or European timezones, with expected travel for team offsites, conferences, and meetups.

In this role, you will

• Build and improve the security foundations of Resend’s platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls.
• Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines.
• Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events.
• Review and update processes and pipelines so security is built-in rather than bolt-on.
• Raise the security bar across the engineering organization.

Requirements

• Experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products.
• Ability to write code and comfortably read application, infrastructure, and deployment code.
• Understanding of authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines.
• Ability to independently prioritize and drive your day-to-day as the first dedicated security hire.
• Preference for practical improvements over heavy processes.
• Low-ego, direct, curious, and willing to learn from others.
• Deep care for developer experience and a belief that security should be easy to adopt.

Nice to have

• Experience with email infrastructure, transactional email, sender reputation, domain verification, SPF, DKIM, DMARC, webhooks, or abuse prevention.
• Experience securing cloud infrastructure using tools like AWS, Terraform, Kubernetes, Cloudflare, or similar systems.
• Experience with open source security, GitHub organization hardening, package publishing, dependency review, or supply-chain security.
• Experience helping prepare for SOC 2, ISO 27001, GDPR, enterprise security reviews, or customer trust processes without turning engineering into a compliance machine.
• Experience building security observability, alerting, detection pipelines, or incident response workflows.
• Experience working closely with Trust & Safety, anti-abuse, fraud, or platform integrity teams.

What Resend offers

• Autonomy to "just ship it"
• 100% remote team with flexible working schedules
• Modern tech stack (Next.js, Raycast, Notion, etc.)
• Ownership of problems and solutions
• Base salary range: $140,000 - $160,000 USD