Senior/Staff Security Engineer

Job Description

Job Description

Key Information:
Work Model: On-site, Monday to Friday
Employment Type: Full-time
Visa Sponsorship: H1B transfers
Experience: 4+ years

Key Responsibilities:
- Own the end-to-end security posture across application, cloud, network, infrastructure, and the AI agent
- Lead secure architecture reviews and threat modeling for agentic systems with governed identities and scoped access
- Design and implement security primitives including customer isolation, credential protection, approval gates, capability controls, and comprehensive audit trails
- Develop and maintain the security architecture documentation used during enterprise customer evaluations
- Lead penetration testing, external security assessments, compliance preparation, and enterprise security reviews
- Establish incident response processes and breach notification readiness
- Continuously audit cloud infrastructure, IAM configurations, access policies, and security controls
- Integrate vulnerability scanning, secret detection, security testing, and compliance checks into CI/CD pipelines
- Define and enforce standards for customer credential handling, data egress, endpoint security, and access management

Requirements:
- 4+ years of hands-on application and infrastructure security experience
- Strong production coding experience in Python, Go, Rust, or TypeScript
- Practical experience with threat modeling, vulnerability identification, and secure system design
- Hands-on experience with network security and identity security
- Strong understanding of identity-based controls, policy enforcement, and workload IAM
- Deep cloud security experience with at least one major cloud provider
- Experience with identity federation and infrastructure-as-code security
- Strong understanding of secure application and infrastructure architecture
- Ability to communicate security risks and trade-offs clearly to both engineering teams and executive stakeholders
- High level of autonomy and comfort working in an early-stage environment with significant ambiguity
- Willingness to work onsite in San Francisco, Monday through Friday, in a high-intensity startup environment