Security Engineer

Superhuman offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that builds trust, sparks innovation, and strengthens team culture.

About Superhuman

Superhuman is an AI productivity suite that makes AI work for everyone. Over 40 million people rely on it daily to get work done. A recognized leader in productivity tools, Superhuman is the maker of popular products including Docs, Fathom, Go, GPTZero, Grammarly, and Mail. The newest product, Superhuman Go, builds on Grammarly’s ability to deliver help everywhere people work. It lets anyone build proactive agents that act as teammates across more than 1 million apps and websites, without changing how they work. Learn more at superhuman.com.

The Opportunity

We're looking for a Security Engineer to join our Detection & Response Team to achieve our ambitious goals. This role will contribute to our D&R team as hands-on practitioner across incident response, detection engineering, threat hunting, and threat intelligence. You'll plan, execute, and debrief complex security operations, leveraging those insights to enhance our threat mitigation capabilities and build robust, automated security tooling across all Superhuman environments.

Additionally, you'll own key workstreams in executing and advancing our security vision, translating strategic objectives into tactical implementations through strong technical execution and innovative solution building, with particular emphasis on automation and AI-powered security solutions. You'll conduct research across security domains and automation technologies, identifying opportunities to enhance our capabilities through cutting-edge approaches and intelligent automation. Finally, you'll bring an attacker mindset into Superhuman’s engineering and security culture, thinking like a threat actor to defend our systems in a way that is grounded in how real attacks happen.

Superhuman's engineers and researchers have the freedom to innovate and uncover breakthroughs—and, in turn, influence our product roadmap. The complexity of our technical challenges is growing rapidly as we scale our interfaces, algorithms, and infrastructure. Curious how we build and operate our AI agents? Check out our engineering blog, and explore our threat-hunting AI here.

As a Security Engineer, you will:

• Own the IR strategy end-to-end, building, maintaining, and operating the systems and tooling that strengthen our ability to detect, contain, and recover from security incidents at scale

• Build and maintain automated threat detection systems, AI-driven alert triage solutions, and security intelligence pipelines that scale with business growth

• Conduct threat hunting and detection engineering, developing detection-as-code, hunting-as-code, and intelligence-as-code capabilities.

• Research and develop cutting-edge security automation and AI-powered security solutions to deepen and scale our ability to identify threats, including autonomous security agents.

• Operate without traditional scope limitations, following attacker kill chains to uncover security gaps that scoped teams miss.

• Lead complex security investigations, including insider threat scenarios and sophisticated attack campaigns.

• Maintain incident response capabilities and serve as part of the Incident Command on-call schedule.

• Embed attacker mindset thinking throughout the organization through education and collaboration with engineering teams.

Qualifications

• Has 3+ years of relevant experience in security engineering, with expertise across multiple disciplines including incident response and detection engineering (threat intelligence, threat hunting experience is nice to have too)

• Proven incident response leadership and complex security investigation experience.

• Automation and development skills in Python, Go, or similar languages, with experience building production security tooling.

• Knowledge of cloud security architecture.

• Research mindset with an ability to identify novel attack vectors and develop creative, pragmatic solutions.

• Thrives in ambiguous environments and can deliver meaningful results at a rapid pace while managing multiple competing priorities.

• Has a demonstrated ability to work independently with minimal guidance, proactively manages tasks and priorities across multiple projects, analyzes and executes work efficiently, collaborates effectively with cross-functional teams, and thrives in fast-paced, results-driven environments.

Nice to have:

• Experience with CI/CD security integration, identity and access management concepts, and security orchestration.

• Experience with large-scale Kubernetes clusters.

• Background in AI/ML applications for security, including experience with or interest in developing autonomous security systems.

Compensation and Benefits

• Professional Growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being

• A connected team: Superhuman builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first, hybrid model enables a highly collaborative culture rooted in our values. We work to foster belonging among team members in a variety of ways. This includes our team member resource groups, Superhuman Circles, which promote connection among those with shared identities including BIPOC and LGBTQIA+ team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs.

• Comprehensive benefits for candidates based in Ukraine: Superhuman offers all team members competitive pay along with a benefits package encompassing life care (including mental health care and risk benefits) and ample and defined time off. We also offer support to set up a home office, wellness and pet care stipends, learning and development opportunities, and more.

We encourage you to apply

At Superhuman, we value our differences, and we encourage all—especially those whose identities are traditionally underrepresented in tech organizations—to apply. Superhuman is an equal opportunity company. We do not discriminate on the basis of race or ethnic origin, religion or belief, color, gender expression or identity, sexual orientation, sexual identity, national origin, citizenship, age, marital status, veteran status, disability status, criminal prosecution, judgment in a criminal case, or any other characteristic protected by law.

For more details about the personal data Superhuman collects during the recruitment process, for what purposes, and how you can address your rights, please see the Superhuman Data Privacy Notice for Candidates here.