Information Security Engineer

About this role

<div class="content-intro"><p>At Algolia, we’re proud to be a pioneer and market leader in AI Search, empowering 17,000+ businesses to deliver blazing-fast, predictive search and browse experiences at internet scale. Every week, we power over 30 billion search requests — four times more than Microsoft Bing, Yahoo, Baidu, Yandex, and DuckDuckGo combined.</p> <p>In 2021, we raised $150 million in Series D funding, quadrupling our valuation to $2.25 billion. This strong foundation enables us to keep investing in our market-leading platform and serving incredible customers like Under Armour, PetSmart, Stripe, Gymshark, and Walgreens.</p></div><p>At Algolia, Information Security is built into everything we do. It is not an afterthought; it’s a core design and operational principle. Our Information Security team ensures that trust, privacy, and resilience are embedded throughout our infrastructure, products, and internal processes. </p> <p>As Algolia continues to expand globally, we are growing our Information Security team to match that scale. We are seeking a pragmatic, technically strong, and collaborative information security engineer to strengthen our Information Security posture and enable the company to innovate securely and confidently.</p> <p><strong>What You’ll Do </strong></p> <ul> <li>Design and automate controls, detection mechanisms, and tooling to improve the Information Security of Algolia’s infrastructure and products </li> <li>Research, evaluate, and recommend new Information Security technologies, techniques, and frameworks </li> <li>Design, implement, and maintain information security monitoring and remediation systems that move the needle in protecting Algolia’s customers’ data, and protecting Algolia’s systems and data </li> <li>Partner with engineering and product teams to integrate Information Security into new features, systems, and development pipelines </li> <li>Contribute to improving Information Security standards, processes, and best practices across the company </li> <li>Conduct Information Security risk assessments and threat models of core systems, services, and third-party vendors (this does not include answering customer third-party risk assessment questionnaires). </li> <li>Participate in and sometimes lead Information Security incident response activities and post-incident analysis </li> <li>Support ongoing and emerging Information Security and compliance initiatives (e.g., SOC 2, Type II, ISO 27001, C5, GDPR)</li> <li>Manage and enhance Algolia’s public bug bounty and vulnerability disclosure programs </li> </ul> <p><strong>What We’re Looking For </strong></p> <ul> <li>3–6 years of experience in Information Security engineering, infrastructure protection, or related technical domains </li> <li>Proficiency in scripting or automation with at least one language (Python, Bash, Go, or similar) is required. Experience with Kubernetes is preferred. </li> <li>Strong understanding of Information Security principles for modern cloud environments (AWS, GCP, or Azure) as well as operations in datacenters. </li> <li>Strong understanding of, comfort with, and at least three years of experience in operating, configuring, and managing log management / SIEM, threat detection and posture management, endpoint detection and response, SAST, SOAR, CTI, and other table-stakes information security systems with strong preference to at least one year of experience with deep use of Crowdstrike or Obsidian (preferably both). </li> <li>Knowledge of common internet Information Security threats, attack vectors, and mitigation strategies </li> <li>Solid understanding of computer systems, networks, and low-level protocols from an Information Security perspective</li> <li>Experience in incident detection, response, and vulnerability management </li> <li>Excellent communication skills, with the ability to explain Information Security risks and concepts to both technical and non-technical audiences </li> <li>Clear ability to collaborate with VP of Information security to advise on next steps and to work independently to achieve business outcomes - rather than a ticket based approach. </li> <li>Full professional proficiency in English </li> </ul> <p><strong>Nice to Have </strong></p> <ul> <li>Experience scaling Information Security programs in high-growth SaaS organizations (10,000+ customers, $50–200M ARR range) </li> <li>Cloud-specific Information Security certifications or equivalent training (e.g., AWS Security Specialty, GCP Professional Security Engineer) </li> <li>Experience with complex secrets management systems such as Hashicorp Vault </li> <li>Experience contributing to Information Security communities, such as bug bounty triage, open-source security tools, or Capture the Flag events </li> <li>Background in privacy engineering, threat modeling, or secure software design </li> </ul> <p><strong>Why You’ll Love Working Here</strong></p> <ul> <li>A culture that values continuous learning, curiosity, and collaboration in Information Security </li> <li>A global, remote-friendly team that treats Information Security as an enabler of innovation </li> <li>Opportunities to make a measurable impact on the Information Security of…