Information Security Engineer

At Algolia, Information Security is built into everything we do. It is not an afterthought; it’s a core design and operational principle. Our Information Security team ensures that trust, privacy, and resilience are embedded throughout our infrastructure, products, and internal processes.

As Algolia continues to expand globally, we are growing our Information Security team to match that scale. We are seeking a pragmatic, technically strong, and collaborative information security engineer to strengthen our Information Security posture and enable the company to innovate securely and confidently.

What You’ll Do

• Design and automate controls, detection mechanisms, and tooling to improve the Information Security of Algolia’s infrastructure and products
• Research, evaluate, and recommend new Information Security technologies, techniques, and frameworks
• Design, implement, and maintain information security monitoring and remediation systems that move the needle in protecting Algolia’s customers’ data, and protecting Algolia’s systems and data
• Partner with engineering and product teams to integrate Information Security into new features, systems, and development pipelines
• Contribute to improving Information Security standards, processes, and best practices across the company
• Conduct Information Security risk assessments and threat models of core systems, services, and third-party vendors (this does not include answering customer third-party risk assessment questionnaires).
• Participate in and sometimes lead Information Security incident response activities and post-incident analysis
• Support ongoing and emerging Information Security and compliance initiatives (e.g., SOC 2, Type II, ISO 27001, C5, GDPR)
• Manage and enhance Algolia’s public bug bounty and vulnerability disclosure programs

What We’re Looking For

• 3–6 years of experience in Information Security engineering, infrastructure protection, or related technical domains
• Proficiency in scripting or automation with at least one language (Python, Bash, Go, or similar) is required. Experience with Kubernetes is preferred.
• Strong understanding of Information Security principles for modern cloud environments (AWS, GCP, or Azure) as well as operations in datacenters.
• Strong understanding of,