# Security Engineer - Tech Lead

**Company:** [Luma AI](https://hotfix.jobs/companies/lumalabs-ai)
**Location:** Palo Alto, CA
**Role:** Security Engineering
**Salary:** $230k – $360k/yr
**Skills:** RBAC, Abac, Secrets Management, Encryption, Key Management, Threat Modeling, Identity Management, Access Control, Audit Logging, Incident Response
**Posted:** 2026-02-24

> Lead design and implementation of security foundations including access governance, RBAC/ABAC, secrets management, and agent permissions for AI platforms. Partner with teams to embed secure practices while maintaining velocity; requires hands-on coding and production security experience.

## Job Description

## What You’ll Do
- Design and mature how access to production systems is granted and governed
- Implement scalable RBAC / ABAC approaches across infrastructure and products
- Build robust secrets management and credential lifecycle practices
- Establish strong encryption and key management patterns
- Define how agents and automated systems receive authority, how it is scoped, and how it is revoked
- Create auditability and forensic visibility for user and system actions
- Lead threat modeling across infrastructure, product, and research domains
- Collaborate with engineering teams to make secure patterns easy and automatic
- Help drive readiness for enterprise security expectations and reviews
- Strengthen incident detection and response capabilities
- Raise the company’s security bar while preserving development velocity

## Required
- Built and operated security foundations in real production environments
- Excellent at writing code, reviewing infrastructure, and shipping systems
- Recognize that in AI platforms, software systems can act with real authority
- Thought deeply about how services, automations, or models are scoped, constrained, and observed
- Think in terms of systems and trust boundaries
- High agency—identify problems and drive them to resolution
- Balance pragmatism with long-term rigor
- Engineers trust you and enjoy partnering with you

## What Sets You Apart
- Helped organizations evolve toward mature, scalable security architectures
- Experience implementing least-privilege access and modern identity models
- Built durable approaches to secrets management and credential lifecycle
- Understand the nuances of securing multi-tenant AI platforms
- Strong opinions on how autonomous systems should be permissioned and governed
- Know how to build detection and response capabilities in high-growth environments
- Can represent the company in detailed customer and partner security discussions
- Build platforms and paved roads that engineers love to use

## Compensation
Base pay range: $230,000 – $360,000 per year.

## Similar roles

- [Senior Engineer, Agentic Identity](https://hotfix.jobs/jobs/854f4cd6-219a-48bf-b2b4-4cdaef0947e3) - Baselayer - San Francisco, CA - $230k – $340k/yr
- [Security Engineer, Detection and Response](https://hotfix.jobs/jobs/ad36f4af-adb4-4f56-9cf2-412bc3302227) - Notion - San Francisco, CA - $230k – $260k/yr
- [Manager, GRC Subject Matter Experts, Product](https://hotfix.jobs/jobs/36e666cc-cc41-42c2-a93f-0fd3c7363c35) - Vanta - Remote - $230k – $311k/yr
- [Security Architecture Lead](https://hotfix.jobs/jobs/f0fce5f5-9d5e-42ec-ade2-3a5d749ca2f8) - Replit - Foster City, CA - $228k – $363k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/62309998-452a-45f9-8dd9-ed880eb50a2d) - Vanta - Remote - $227k – $267k/yr

**Apply:** https://hotfix.jobs/jobs/8cfaaaab-7daf-4731-8dc4-6131fca0e597
**Canonical:** https://hotfix.jobs/jobs/8cfaaaab-7daf-4731-8dc4-6131fca0e597