Senior Engineer, Information Security

At LinkedIn, our approach to flexible work is centered on trust and optimized for culture, connection, clarity, and the evolving needs of our business. The work location of this role is hybrid, meaning it will be performed both from home and from a LinkedIn office on select days, as determined by the business needs of the team. This role will be based in Bangalore, India. LinkedIn's members entrust us with their information every day and we take their security seriously. Our core value of putting our members first powers all the decisions we make, including how we manage and protect the data of our members and customers. Information Security at LinkedIn is dedicated to protecting and securing business-critical member data and company assets. Our core mission is to empower LinkedIn to create a secure and thriving platform for every member of the global workforce. The product and platform security team is responsible for securing all of LI’s services be it on-prem or cloud. As a Senior Software Engineer, you will oversee the creation of features and systems designed to enhance platform integrity and user confidence. In this capacity, you are accountable for the secure software development lifecycle (SSDLC) and the security of CI/CD pipelines for both member-facing and internal products. You will own and evolve the secure software development lifecycle (SSDLC) by integrating leading security practices into every phase, from planning and architecture reviews to continuous testing and maintenance. In this capacity, you will oversee developer guardrails—including secure coding criteria, architectural designs, and code reviews—while driving the adoption of paved paths within the CI/CD pipeline. By automating scanning, testing, and compliance checks at every stage, you will ensure software supply chain security and code integrity from development through production, reducing systemic risk and driving high-value security outcomes. Act as a force multiplier by championing AI-assisted security workflows and utilizing AI-native systems that offer deep architectural reasoning. By integrating these advanced guardrails, you will eliminate classes of vulnerabilities ranging from traditional risks like the OWASP Top 10 to emerging, sophisticated threats like prompt injections targeting agentic applications. Responsibilities: Own, evolve, and drive the secure development lifecycle. Drive “shift-left” and “shift-down” initiatives across architecture reviews, threat modeling, SAST/DAST, continuous end to end testing, fuzzing, etc. Drive adoption of paved paths by focusing on safe coding, cryptographic hygiene, software supply chain security Design security paved roads and developer guardrails to eliminate classes of vulnerabilities Force multiplier and champion for AI assisted security workflows Collaborate with engineering to mitigate security risks, and support shipping quickly Evaluate and enhance security tooling and automation to bolster technical rigor while driving operational efficiency and high-value security insights Stay at the forefront of the field by maintaining rigorous expertise in evolving security risks, landscape shifts, and cutting-edge defensive methodologies Establish and report on meaningful security engineering and operations metrics, including program health, control effectiveness, availability performance, remediation progress, and risk reduction outcomes Evaluate and improve security tooling, processes, and controls to reduce systemic risk, increase operational efficiency, and ensure the team is focused on the highest-value security work

Basic Qualifications BA/BS Degree in Computer Science or related technical discipline, or related practical experience. 4+ years experience programming experience in Python, Go or Java. Preferred Qualifications 6+ years of relevant work experience. Expert knowledge of computer science, with strong competencies in data structures, algorithms, and software design. Experience with object-