Security Engineer

Superhuman offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that builds trust, sparks innovation, and strengthens team culture.

ABOUT SUPERHUMAN

Grammarly is now part of Superhuman, the AI productivity platform on a mission to unlock the superhuman potential in everyone. The Superhuman suite of apps and agents brings AI wherever people work, integrating with over 1 million applications and websites. The company’s products include Grammarly’s writing assistance, Superhuman Docs’ collaborative workspaces, Mail’s inbox management, and Go, the proactive AI assistant that understands context and delivers help automatically. Founded in 2009, Superhuman empowers over 40 million people, 50,000 organizations, and 3,000 educational institutions worldwide to eliminate busywork and focus on what matters. Learn more at superhuman.com http://superhuman.com.

THE OPPORTUNITY

We're looking for a Security Engineer to join our Detection & Response Team to achieve our ambitious goals. This role will contribute to our D&R team as hands-on practitioner across incident response, detection engineering, threat hunting, and threat intelligence. You'll plan, execute, and debrief complex security operations, leveraging those insights to enhance our threat mitigation capabilities and build robust, automated security tooling across all Superhuman environments.

Additionally, you'll own key workstreams in executing and advancing our security vision, translating strategic objectives into tactical implementations through strong technical execution and innovative solution building, with particular emphasis on automation and AI-powered security solutions. You'll conduct research across security domains and automation technologies, identifying opportunities to enhance our capabilities through cutting-edge approaches and intelligent automation. Finally, you'll bring an attacker mindset into Superhuman’s engineering and security culture, thinking like a threat actor to defend our systems in a way that is grounded in how real attacks happen.

Superhuman's engineers and researchers have the freedom to innovate and uncover breakthroughs—and, in turn, influence our product roadmap. The complexity of our technical challenges is growing rapidly as we scale our interfaces, algorithms, and infrastructure. You can hear more from our team on our technical blog. https://blog.superhuman.com/new-threats-demand-new-approaches-how-superhuman-security-engineers-use-ai/

As a Security Engineer, you will:

• Own the IR strategy end-to-end, building, maintaining, and operating the systems and tooling that strengthen our ability to detect, contain, and recover from security incidents at scale

• Build and maintain automated threat detection systems, AI-driven alert triage solutions, and security intelligence pipelines that scale with business growth

• Conduct threat hunting and detection engineering, developing detection-as-code, hunting-as-code, and intelligence-as-code capabilities.

• Research and develop cutting-edge security automation and AI-powered security solutions to deepen and scale our ability to identify threats, including autonomous security agents.

• Operate without traditional scope limitations, following attacker kill chains to uncover security gaps that scoped teams miss.

• Lead complex security investigations, including insider threat scenarios and sophisticated attack campaigns.

• Maintain incident response capabilities and serve as part of the Incident Command on-call schedule.

• Embed attacker mindset thinking throughout the organization through education and collaboration with engineering teams.

QUALIFICATIONS

• Has 3+ years of relevant experience in security engineering, with expertise across multiple disciplines including incident response and detection engineering (threat intelligence, threat hunting experience is nice to have too)

• Proven incident response leadership and complex security investigation experience.

• Automation and development skills in Python, Go, or similar languages, with experience building production security tooling.

• Knowledge of cloud security architecture.

• Research mindset with an ability to identify novel attack vectors and develop creative, pragmatic solutions.

• Thrives in ambiguous environments and can deliver meaningful results at a rapid pace while managing multiple competing priorities.

• Has a demonstrated ability to work independently with minimal guidance, proactively manages tasks and priorities across multiple projects, analyzes and executes work efficiently, collaborates effectively with cross-functional teams, and thrives in fast-paced, results-driven environments.

Nice to have:

• Experience with CI/CD security integration, identity and access management concepts, and security orchestration.

• Experience with large-scale Kubernetes clusters.

• Background in AI/ML applications for security, including experience with or interest in developing autonomous security systems.

COMPENSATION AND BENEFITS

• Professional Growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being

• A connected team: Superhuman builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first, hybrid model enables a highly collaborative culture rooted in our values. We work to foster belonging among team members in a variety of ways. This includes our team member resource groups, Superhuman Circles, which promote connection among those with shared identities including BIPOC and LGBTQIA+ team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs.

• Comprehensive benefits for candidates based in Germany and Ukraine: Superh