Staff Security Engineer

You will guide secure design and verification for high-risk product changes, define threat models, and review sensitive code paths. You will manage security findings and tooling, reduce AWS risk, support incident remediation, and build practical security controls across production, development, and internal systems.

Responsibilities

• Guide secure design, implementation, and verification for high-risk changes
• Define threat models and security requirements
• Own security findings and drive remediation or risk acceptance
• Build and operate scalable security tooling and automation
• Reduce cloud risk across IAM, network segmentation, workload isolation, secrets, logging, and configuration
• Reduce security risk across production, development, software delivery, enterprise AI, and internal systems
• Scope and remediate incidents and implement durable improvements

Requirements

• 8+ years of product security experience
• Production software engineering experience
• Proficiency in Go, Python, Java, TypeScript, or another backend or automation language
• Knowledge of OAuth, OIDC, SAML, JWT, RBAC, ReBAC, API security, threat modeling, and secure code review
• Knowledge of cloud security concepts including IAM, network architecture, workload isolation, secrets, and logging
• Experience reproducing vulnerabilities and conducting dynamic testing
• Experience owning security tooling or automation
• Ability to work from the San Francisco office three days per week

Benefits

• Medical, dental, and vision coverage for employees and dependents
• 401(k) matching up to 3% of base salary
• Remote-friendly culture and full equipment provisioning
• Parental leave
• Company and team off-sites with travel, lodging, and meals covered
• Flexible time off with no annual cap
• Company-wide holidays and annual holiday shutdown