Security Operations Engineer

• Join the Product Security team as one of three Security Operations Engineers providing front-line coverage for security alerts, customer security tickets, and internal IT requests. • Work in a follow-the-sun rotation across New Zealand/Australia, Sri Lanka, and US Eastern to maintain effective 24-hour coverage for security-relevant work. • Triage alerts, handle customer security requests, support internal IT operations, improve runbooks, and escalate clearly to the right teams when issues need deeper investigation.

• Have prior experience in technical support, IT helpdesk, junior SOC analysis, trust and safety, fraud operations, or a similar triage-heavy environment. • Have a foundational understanding of security concepts like MFA, JWTs, identity verification, account recovery, and access control. • Have a foundational understanding of IT systems like SSO, identity providers, Google Workspace, Okta, and MDM tools like Kandji, Jamf, or similar. • Be comfortable with a terminal, basic SQL, and reading simple scripts or macros without needing to be a developer. • Be able to summarise a messy ticket or noisy alert in two sentences that explain what matters and what should happen next. • Have strong customer-facing judgement and be able to stay calm, precise, and firm when handling sensitive access or account issues. • Enjoy turning ambiguous workflows into clear checklists, runbooks, macros, and repeatable systems. • Be comfortable working async across time zones and writing things down by default.

• Have familiarity with Postgres, AWS, or developer tools ecosystems. • Bring experience with Front, Linear, Notion, Okta, Google Workspace, Kandji, Jamf, Vanta, or similar tools. • Have open-source contributions, CTF participation, bug bounty experience, or a personal project that shows security curiosity. • Have experience improving support, SOC, trust and safety, fraud, or IT workflows, or basic scripting and automation experience.

• Act as the first responder for security alerts from GuardDuty, dependency advisories, and other detection sources, assessing severity and escalating to the right lead across Platform, Product, Anti-Abuse, or Security. • Own customer security tickets in Front including account recovery, MFA reset, GitHub-linked account loss, billing-based ownership verification, and org ownership disputes. • Participate in the on-call pager rotation alongside other Security Operations Engineers and use documented playbooks to make consistent decisions. • Maintain and improve runbooks, decision trees, Front macros, and escalation paths, identifying patterns in tickets and alerts to flag opportunities for automation or workflow improvements. • Triage internal IT requests including access provisioning, SSO/Okta issues, device questions, and MDM enrolment, and help maintain access records, joiner-mover-leaver hygiene, and compliance audit trails. • Communicate clearly with customers, engineers, and internal stakeholders during sensitive or time-critical issues.

• Work fully remotely from a compatible follow-the-sun timezone. • Receive ESOP equity ownership in the company. • Get a tech allowance to set up your ideal work environment. • Receive 100% employer-covered health insurance with 80% coverage for dependents. • Attend annual company off-sites in a new city each year. • Work flexibly and asynchronously with full trust to manage your own time. • Receive a professional development allowance for courses, books, conferences, and learning. • Access a WeWork membership or co-working allowance usable anywhere in the world.

Supabase is the open-source Postgres development platform that 7M+ developers and thousands of enterprises depend on every day. Providing a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search, Supabase is born-remote and open-source-first with around 400 team members across 60+ countries. The company has raised over $1B including a $500M Series F.