Software Engineer, Security
Builds secure tools and features for platform, editor, and customer protection, including AI code review, least-privilege cloud access, and safe agent environments. Requires strong software engineering with security expertise, builder-attacker mindset, and experience scaling secure systems.
About the job
Responsibilities
- Build AI augmented code review to get involved in important systems at the right time.
- Build a least-privilege and JIT system for cloud access that enables engineers and enforces least privileges.
- Implement a safe environment for agents to engage with code.
- Implement a framework for securely handling agent manipulation of user systems (e.g., MCP tool calls and command execution).
- Implement a paved road for preventing inappropriate data from being logged.
Requirements
- Strong software engineer first, with security as your superpower.
- Think like both a builder and an attacker: anticipate vulnerabilities before they become issues.
- Care about developer experience, building solutions that are secure and frictionless.
- Comfortable moving quickly, owning problems end to end, and iterating with limited guidance.
- Experience building or scaling secure systems in fast-moving environments.
- Strong opinions on secure defaults, but can balance pragmatism with rigor.
- Enjoy working on small, high-talent teams where impact is magnified.
- Motivated by protecting developers and users, and see security as an enabler.
Skills
Cloud Infrastructure, AI, Secure Systems, Least Privilege, Jit Access, Code Review, Agent Security, Developer Tools, Vulnerability Prevention
Similar jobs
Security Engineering jobs
Datadog
New York, NY
Security Engineer on the Cyber Threat Intelligence team responsible for developing threat intel tooling, conducting threat hunting, analyzing malware, and operationalizing intelligence into detections and response workflows.
Stripe
United States
Designs and incubates technical defenses against complex abuse and fraud across Stripe’s payment, onboarding, identity, and Connect surfaces. Requires 3+ years of security or software engineering experience, strong production programming and SQL skills, and expertise in API safeguards and automated testing.
Fluidstack
New York, NYThe Security Engineer will track advanced adversaries targeting frontier AI infrastructure, build intelligence pipelines, conduct threat hunts, and create production detections. The role requires hands-on malware and infrastructure analysis, production programming, and close collaboration with detection and incident response teams.
Figma
San Francisco, CASecurity Scientist analyzing attacker and user behavior, building data-driven detections, and leading security investigations and design reviews. Requires strong security and anti-abuse knowledge, SQL fluency, scripting proficiency, and experience with distributed data systems and statistical methods.
hud
San Francisco, CA
Own and build the company’s security program as its first full-time security hire, covering product, cloud, infrastructure, incident response, compliance, and customer trust. The role requires hands-on security engineering and incident leadership, with experience operating SOC 2 or comparable frameworks.