Senior Software Engineer - Security

Responsibilities

• Design, write, ship, test, and operate production security services and features.
• Build scanning and assurance tooling, agentic and LLM-integrated components, backends, APIs, and developer workflow integrations.
• Develop software supply chain capabilities for dependency risk management, build and release integrity, artifact signing and verification, and policy-based runtime admission.
• Own significant components end to end and maintain software quality and service-level objectives.
• Partner with infrastructure, platform, product security, and internal customer teams.
• Participate in code and security reviews, research and prototype solutions, and present designs and results.

Requirements

• 13+ years of hands-on software engineering experience, including production ownership of non-trivial systems.
• Proficiency in at least two of Python, Go, and Java, with the ability to work across additional languages.
• Knowledge of software supply chain security, including dependency risk, build and release integrity, artifact signing and verification, attestation infrastructure, and policy-based admission.
• Production experience designing and operating agentic systems and LLM-integrated applications, including prompt engineering, orchestration, and model-output evaluation.
• Familiarity with static and dynamic application security analysis and their operational trade-offs.
• Experience designing and operating distributed backends, APIs, data pipelines, and services with uptime and performance requirements.
• Experience building and maintaining CI/CD pipelines and integrating security controls into them.
• Comfort operating in Linux and macOS and proficiency in a shell scripting language such as Bash.
• Understanding of the software development lifecycle, including building, testing, deploying, and monitoring production software.
• Preferred experience includes policy admission systems, threat modeling, taint analysis, program analysis, web and service-level vulnerabilities, model and service integration, full-stack engineering, containerization, container orchestration, cloud infrastructure, and gRPC.
• Bachelor’s degree in Computer Science or equivalent work experience in a related field.