Staff Software Engineer, Platform Security

About the role

Make the secure path the easy path for 80 products. You will lead the engineering of our software supply-chain controls, from build provenance and SBOMs to the security gates every release must pass.

What you’ll do

• Own the architecture for build provenance, signing and software bills of materials across our products
• Build and scale the CI/CD security gates (SAST, DAST, dependency and licence checks) engineers rely on
• Design paved-road tooling that lets product teams ship quickly without bypassing controls
• Lead incident response for supply-chain vulnerabilities such as the next Log4j
• Mentor senior engineers and set technical direction with the CISO's office

What you’ll bring

• 10+ years of software engineering, including significant security or platform work
• Deep experience with CI/CD systems, containers and infrastructure-as-code
• Track record of leading cross-team technical initiatives
• Strong grasp of software supply-chain threats and mitigations

Nice to have

• Contributions to SLSA, Sigstore or similar projects
• Experience supporting FedRAMP or DoD workloads

Location and working arrangement

This role is hybrid, based in our San Francisco office. You’ll need to be able to work from San Francisco on a regular basis, and your team agrees its own rhythm for being together.

The application asks whether you are authorized to work in the United States or will need visa sponsorship. Sponsorship depends on the role and the country; your recruiter will be clear about what is possible before you invest time in interviews.

Compensation

$305,000 – $345,000 per year

Where you land in the range depends on your experience and skills, not on how well you negotiate. Any offer we make is within this range.

How to apply

1. ApplyAbout five minutes. You get a private link to track your application.
2. Recruiter reviewA recruiter reads every application, usually within five business days.
3. Recruiter screenA 30-minute call about your experience and what you are looking for.
4. InterviewsUsually two to three conversations with the team, including a practical exercise relevant to the role.
5. OfferPay is always within the range on the listing. We check references before you start.

You’ll need your résumé (PDF, Word (.doc or .docx), RTF or plain text, up to 5 MB) or a link to your LinkedIn profile or online résumé. Applying takes about five minutes, and you can create a candidate account to save your progress and follow every application in one place. How we hire explains each step.

Apply now

Working at Moraph

We build and operate software for credit unions, hospitals and government agencies, where a failure means a regulatory breach or a patient-safety incident. We work as one team across New York, London, Sydney, Buenos Aires, Yerevan, Mumbai, Manila and more, on the same tools and to the same standards. Everyone gets the same high-spec laptop, software and security tooling, whichever office they work from.

Equal opportunity and accommodations

Moraph is an equal opportunity employer. We welcome applicants of every background and provide reasonable accommodations throughout the hiring process. Tell us in your application, or email careers@moraph.com. How to ask for an accommodation.