Senior Security Engineer, AI Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and oversee infrastructure-level security measures for Dropbox's AI and agentic systems, encompassing cloud infrastructure, Kubernetes, and data repositories.

• Create and execute secure authentication, authorization, and networking models for AI agents and other non-human entities.

• Spearhead security initiatives for the secure utilization of AI tools and governance protocols.

• Sustain and enhance the security of Dropbox's infrastructure to safeguard customer information.

• Assess existing and forthcoming infrastructure frameworks from a security standpoint and offer hardening strategies and advice.

• Deploy, construct, and/or manage security infrastructure solutions for Dropbox's on-premises and cloud environments.

• Collaborate with cross-functional teams and direct security projects to impact product choices and bolster security posture.

• Engage in on-call rotations as necessary, including availability during both core and non-core business hours.

⛳️ Requirements

• A minimum of 8 years of security experience, showcasing significant contributions to security strategies.

• Proven experience in securing agentic AI systems with practical implementation of security controls aimed at prompt injection, data or model poisoning, and AI supply-chain risks.

• Expertise in designing and establishing identity and authorization frameworks for non-human workloads and agents utilizing SPIFFE/SPIRE, OAuth 2.1, OIDC, or equivalent solutions from cloud providers.

• Demonstrated experience in policy-as-code, infrastructure-as-code, and security automation for cloud and AI environments.

• Familiarity with agentic frameworks and integration of MCP tools.

• Knowledge of cloud security technologies for AWS, GCP, or Microsoft Azure.

• Proficient in one or more scripting or high-level programming languages, such as Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, or Java.

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience, with coding proficiency.

• Preferred: Experience in securing MCP-based systems or analogous AI agent and tool protocols.

• Preferred: Knowledge of multi-agent security controls including trust boundaries, signed inter-agent messaging, and circuit breakers.

• Preferred: Understanding of NIST AI RMF, NIST SP 800-218A, and OWASP LLM and agentic security guidelines.

• Preferred: Experience in Kubernetes and container security practices.

• Preferred: Familiarity with tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM, or SOAR.

• Preferred: Relevant certifications like CISSP or CISM, or equivalent credentials.

• Preferred: Active participation in security community activities, conferences, or publications.

🏝️ Benefits

• Participation in on-call rotations as part of employment, where applicable.

• Compensation range varies by US zone.