Buffer is hiring a Lead Security Engineer to set direction and execute on security and compliance for a fully distributed, primarily remote company. The role reports to the Engineering Manager for Infrastructure and Security and partners closely with a small security team and product engineers. Responsibilities include defining security strategy and roadmap, building tools and automation, embedding security in development (PR reviews, threat modeling, dependency and secrets hygiene), leading incidents and on-call rotation, running vulnerability disclosure, and supporting SOC 2 and other compliance efforts. The stack includes TypeScript/Node.js services, a public GraphQL API, AWS (EKS, IAM, S3), Kubernetes, Cloudflare, Terraform, ArgoCD, GitHub Actions, and observability tools like Datadog and Sentry.