Software Engineer, Security

About the job

Responsibilities

• Partner with product and research teams to embed security into the development lifecycle, including threat modeling, design reviews, and establishing secure defaults for new features.
• Design and implement security controls across the product stack, covering areas like authentication, authorization, session management, input validation, and data protection.
• Build and maintain security tooling and automation for engineers, such as secure frameworks, templates, CI/CD checks, dependency management, and vulnerability detection.
• Collaborate with researchers to identify and mitigate AI-specific product risks, including model abuse, prompt injection, data leakage, and misuse of capabilities.
• Enhance observability and detection mechanisms for security-relevant events, such as access anomalies, abuse patterns, and suspicious behavior in production.

Requirements

• Bachelor's degree or equivalent experience in computer science, engineering, or a related field.
• Proficiency in at least one backend language, such as Python or Rust.
• Strong generalist software engineering background with the ability to review production code for security risks.
• Hands-on experience securing web applications and APIs, particularly in authentication flows, access control, secrets management, input validation, and data protection.
• Familiarity with common vulnerability classes and prevention frameworks, and experience hardening prototypes into production.
• Comfort with modern cloud infrastructure and understanding how application concerns intersect with infrastructure.
• Ability to operate across the full stack and own projects end-to-end.
• Thrive in a highly collaborative environment with cross-functional partners and subject matter experts.
• Demonstrate a bias for action and initiative to drive improvements across different stacks and teams.
• Experience securing AI-powered products or working with ML/LLM APIs and their unique threat models is preferred.
• Background in human-computer interaction, especially concerning security or trust in user experience, is preferred.
• Strong skills in rapid prototyping and iteration, with a habit of turning ad-hoc fixes into reusable patterns and tools, is preferred.
• Experience with open-source security work, bug bounty write-ups, or published tooling is preferred.

Benefits

• Generous health, dental, and vision benefits
• Unlimited PTO
• Paid parental leave
• Relocation support