---
title: 'Security Engineer at Posthog'
canonical: 'https://feeny.ai/job/security-engineer-posthog-emea-jrpa20362em6'
type: 'job'
last_seen: '2026-09-17'
---

# Security Engineer at Posthog

- **Company:** Posthog
- **Location:** EMEA
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-14
- **Last confirmed live:** 2026-09-17
- **Apply:** https://jobs.ashbyhq.com/posthog/36d5ce14-851c-450f-879a-45cbb896225e

## Job description

## About PostHog

Product development used to mean manually writing code, running analysis, diagnosing bugs, and rolling out changes using dozens of tools. PostHog makes products [self-driving](https://posthog.com/self-driving). It's the only platform that acts like a co-pilot for you (and your AI agents) to do it all – autonomously. We started with open-source product analytics, [launched out of Y Combinator's W20 cohort](https://posthog.com/handbook/story). We've since shipped [more than a dozen products](https://posthog.com/products), including:

- [PostHog Desktop](https://posthog.com/desktop), the only AI devtool that understands your product, not just your codebase.
- [A built-in data warehouse](https://posthog.com/docs/data-warehouse), so users can query product and customer data together using custom SQL insights.
- [PostHog AI](https://posthog.com/ai), an AI-powered analyst that answers product questions, helps users find useful session recordings, and writes custom SQL queries.

We are:

- Product-led. More than 450,000 organizations have installed PostHog, mostly driven by word-of-mouth. We have intensely strong product-market fit.
- [Default alive](https://paulgraham.com/aord.html). Revenue is growing incredibly quickly, and we're very efficient. We raise money to push ambition and grow faster, not to keep the lights on.
- Well-funded. We've raised more than $180m from some of the world's top investors. We're set up for a long, ambitious journey.

We're focused on building an awesome product for end users, hiring exceptional teammates, shipping fast, and [being as weird as possible](https://posthog.com/deskhog).

Things we care about

- Transparency: Everyone can read about our roadmap, how we pay (or even let go of) people, our strategy, and how we work, in our[public company handbook](https://posthog.com/handbook). Internally, we share revenue, notes and slides from board meetings, and fundraising plans, so everyone has the context they need to make good decisions.
- Autonomy: We don’t tell anyone what to do. Everyone chooses what to work on next based on what's going to have the biggest impact on our customers, and what they find interesting and motivating to work on.[Engineers lead product teams](https://posthog.com/handbook/wide-company) and[make product decisions](https://posthog.com/handbook/which-products). Teams are flexible and easy to change when needed.
- Shipping fast:[Why not now?](https://posthog.com/handbook/values#why-not-now) We want to build a lot of products; we can't do that shipping at a normal pace. We've built the company around small teams – autonomous, highly-efficient groups of[cracked engineers](https://posthog.com/founders/cracked-manifesto) who can outship much larger companies because they own their products end-to-end.
- Time for building: Nothing gets shipped in a meeting. We're a natively remote company. We default to async communication – PRs > Issues > Slack. Tuesdays and Thursdays are[meeting-free days](https://posthog.com/handbook/company/culture#were-on-the-makers-schedule), and we prioritize heads down building time over perfect coordination. This will be the most productive job you've ever had.
- Ambition: We want to solve big problems. We strongly believe that aiming for the best possible upside, and sometimes missing, is better than never trying. We're optimistic about what's possible and our ability to get there.
- Being weird: Weird means redesigning an already world-class website for the 5th time. It means shipping literally every product that relates to customer data. It means building an[objectively unnecessary developer toy](https://posthog.com/deskhog) with dubious shareholder value. Doing weird stuff is a competitive advantage. And it's fun.

Who we're looking for We are looking for an expert security generalist (in EU/UK) to assist with all things security at PostHog. Someone equally adept (and interested!) in building secure libraries, writing semgrep rules, hardening cloud deployments, improving network observability, and leading incident response. Someone to take the reins of our security operations, build out our detection pipelines, and ensure that when something goes bump in the night, we have the observability to know exactly what happened.

We're a team that's building internal security products and agents - things like agents to automatically triage wiz alerts, automatically review pull requests, automatically assign vulnerability findings to the owning product team. In this role you’ll:

- Build from Scratch: You aren't maintaining someone else's legacy SIEM. You are shaping the security team, culture and tooling for a high-growth, open-source company.
- Zero Bureaucracy: We hate meetings. We don't have "Security Committees." You have the autonomy to make changes and move fast.
- Transparency: We work in the open. You’ll be able to see (and contribute to) how we handled past incidents, like this[NPM package compromise](https://www.google.com/search?q=https://github.com/PostHog/posthog/issues/example).
- Direct Impact: Your work directly protects the data of thousands of customers. When you improve our security posture, the whole company (and our community) feels it.

## What you'll be doing

- Triage and Tune: You’ll own our Wiz alerts. You’ll be responsible for turning "noise" into "actionable findings" and ensuring we aren't just staring at a dashboard of issues that don't actually matter. We already get relatively few alerts, and we’d like to even further reduce that to just the ones that matter.
- Incident detection, response: You’ll lead the charge on security incidents. Whether it’s a compromised NPM package or a suspicious IAM pattern, you’ll help coordinate the response and lead the post-mortem. You’ll also help build our IR runbooks.
- Build Observability: You’ll build detection pipelines, and close our network-based observability gaps. We want to be able to trace network requests and suspicious activity all the way back to specific code paths.
- Threat Hunting: You’ll proactively hunt for threats in our AWS environment. You won't just wait for an alert; you'll define what "good" looks like and build the telemetry to prove it.
- The VDP: You’ll support our Vulnerability Disclosure Program, triaging reports from researchers and eventually transitioning us toward a formal bug bounty program.
- Enable the Team: You’ll support our product squads with threat modeling and secure design reviews. We don't do "Security says no"; we do "Security says 'here is how to do this safely.'"
- Help build our security culture: Our engineers trust the security team and view security as an enabler. You’ll be a crucial part of helping to continue this excellent (and uncommon) working relationship.

While this is not a Corporate security (MDM, endpoint, device trust) or Supply chain/CI-CD hardening role, in true PostHog style, there are opportunities to work on these as well.

## Requirements

- Cloud Native: You have 3-5+ years of experience in security engineering with a heavy focus on AWS. You know your way around IAM, VPC logs, and CloudTrail like the back of your hand.
- Detection Specialist: You’ve used CSPM/CNAPP tools (like Wiz or Prisma) and, more importantly, you know how to build detection pipelines that engineers actually trust.
- Battle-Tested: You’ve led incident response before. You’re calm under pressure and know how to coordinate across teams to contain a threat.
- High Autonomy: We don’t have a security SOC. You’ll be building this function from scratch, so you need to be comfortable deciding what’s important and executing on it without a manual.
- Engineering skills: You bring strong engineering experience and next to digging into code to understand an exploit or a vulnerability, you can write code with the same proficiency as our product engineers.
- Communication and attitude: As mentioned before we don't do "Security says no", we do "Security says 'here is how to do this safely.” This is crucial for us, we need people that want to enable engineers and work with them, not limit them.

## Nice to Have

- Incident management: Strong experience with incident response/incident detection

We are committed to ensuring a fair and accessible interview process. If you need any accommodations or adjustments, please let us know

## #LI-DNI

## About Posthog

## Company Overview
- **One-liner**: PostHog is an open-source product analytics platform that provides a suite of tools for product engineers to build, analyze, and improve their products.
- **Entity Type**: Private (revenue over $50M, default-alive, venture-backed)
- **Headquarters**: Fully remote (team distributed across 20+ countries, no central office)
- **Founded**: 2020
- **Founders**: Not publicly available in provided sources

## Core Business
- **Primary industry**: Product analytics, developer tools, data infrastructure
- **Target customers**: B2B, enterprises, SMBs, and startups – especially product engineers and data teams
- **Mission**: "Help product engineers build successful products" [[posthog.com/about]](https://posthog.com/about)

## Products & Services
- **Product Analytics**: Core analytics tool for tracking user events, funnels, retention, and insights. SaaS with self-hosted option.
- **Session Replay**: Record and replay user sessions to understand behavior.
- **Feature Flags**: Gradually roll out features and experiment with A/B testing.
- **Data Warehouse & CDP-lite**: Managed warehouse with 120+ integrations, SQL editor, BI, and a customer data platform layer.
- **A/B Testing**: Native experimentation tool integrated with feature flags.
- **API & Webhooks**: Programmatic access and event streaming.
- **Error Tracking & App Monitoring**: (Product OS suite) – observability and exception tracking.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Annual Revenue > $50M (stated on careers page) [[posthog.com/careers]](https://posthog.com/careers)
- **Notable Investors/Partners**: Y Combinator (used by 65% of each batch); investors and partners are not detailed in provided sources.
- **Growth Signals**: 190,254+ customers; 98% use the free tier; company has grown to 200+ team members; highly transparent (public handbook, roadmap, and salary calculator).

## Competitive Advantages
- **Open-source core**: Codebase publicly auditable, fostering trust and community contributions.
- **Extreme transparency**: Public salary calculator, company handbook, roadmap, and even investor communications.
- **Usage-based pricing**: Generous free tier (1M events/mo), matches cheapest major competitor, no sales calls required.
- **Wide product suite**: Single platform replaces multiple tools (analytics, session replay, feature flags, data warehouse, etc.).
- **Remote-first culture**: 100% remote, global team, asynchronous communication, and no micromanagement.

## Strategic Focus
- **Current priorities**: Continuing to expand the "Product OS" suite to cover every tool a product engineer needs; maintaining razor-thin pricing to drive scale; fostering an autonomous small-team structure to ship fast.
- **Growth direction**: Deepening integrations and data connectivity, moving upmarket with enterprise features while preserving self-serve, and expanding AI/observability products.

## Why Work Here
- **Remote-first**: Fully remote with no geo-restrictions; $300/mo co-working budget and $1,500/quarter travel budget for team meetups.
- **Culture**: "We're weirdos, low egos, and biased for action." Two meeting-free days per week (Tuesdays and Thursdays).
- **Benefits**: Unlimited PTO (minimum 25 days/year), generous parental leave, yearly company off-sites and hackathons, $1,000 paid SuperDay for candidates.
- **Equity**: 10-year exercise window, double-trigger acceleration, employee secondaries (first tender offer in 2025).
- **Transparent pay**: Salary and equity ranges publicly listed (e.g., Product Engineer: $270,750 – $296,400 + significant equity). Full calculator available before applying.
- **Autonomy**: Organized into small, autonomous teams (like "startups within a startup") with direct reporting to execs and minimal hierarchy.

## Sources
1. [posthog.com/about](https://posthog.com/about) – Company overview and mission
2. [posthog.com/](https://posthog.com/) – Homepage with product details and pricing
3. [posthog.com/careers](https://posthog.com/careers) – Revenue, team size, compensation, and interview process
4. [posthog.com/handbook/company/culture](https://posthog.com/handbook/company/culture) – Remote culture, transparency, and values
5. [posthog.com/handbook/wide-company](https://posthog.com/handbook/wide-company) – Small team structure and autonomy

## Other roles at Posthog

- [Finance Manager, Revenue Accounting](https://feeny.ai/job/finance-manager-revenue-accounting-posthog-united-states-egeafeks5e0a) — United States
- [Technical Staff Writer (Blogs & Newsletters)](https://feeny.ai/job/technical-staff-writer-blogs-newsletters-posthog-remote-5hyexpad1mbz)
- [ClickHouse Operations Engineer](https://feeny.ai/job/clickhouse-operations-engineer-posthog-remote-4x8ssmszh6nw)
- [AI Research Engineer](https://feeny.ai/job/ai-research-engineer-posthog-united-kingdom-gf7t35c07qca) — United Kingdom
- [Technical Customer Success Manager - EMEA](https://feeny.ai/job/technical-customer-success-manager-emea-posthog-emea-9a6s16zp4z9g) — EMEA
- [Site Reliability Engineer (US - Pacific time)](https://feeny.ai/job/site-reliability-engineer-us-pacific-time-posthog-san-francisco-6nghzs9t9vky) — San Francisco, CA
- [Business Development Lead - Americas](https://feeny.ai/job/business-development-lead-americas-posthog-remote-fy9d95v4emms)
- [Technical Customer Success Manager - Americas](https://feeny.ai/job/technical-customer-success-manager-americas-posthog-remote-v3cxmnx5bvbm)
- [Security Engineer](https://feeny.ai/job/security-engineer-xbow-united-states-6tgwhda2vm09) — United States
- [Security Engineer](https://feeny.ai/job/security-engineer-cloudbeds-canada-xtp11nynf4qg) — Canada