Staff Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish security architecture and engineering standards for web, API, and cloud-native systems, spearheading the hardening of intricate services.

• Direct threat modeling and security design evaluations across applications and AI systems, determining how risks are identified and prioritized.

• Design cloud security controls encompassing identity, network, and data layers, taking ownership of IAM strategy, secrets management, and encryption.

• Oversee the incorporation of security automation into CI/CD pipelines, promoting shift-left detection and policy-as-code across teams.

• Manage detection engineering, logging, and incident response practices within production systems.

• Take responsibility for the security of AI and LLM-powered applications in production, establishing defenses against prompt injection, data leakage, model abuse, and agentic-AI threats.

• Direct the design and integration of AI services into production security workflows, including LLM APIs, tool and function calling, and multi-step agent flows for detection and triage.

• Leverage tools like Claude, Cursor, and other contemporary AI assistants to deliver high-quality work efficiently.

• Collaborate with product, engineering, and leadership teams to shape security strategy and ensure technical direction aligns with business outcomes.

• Convert complex security trade-offs, risks, and opportunities into clear narratives for both technical and non-technical stakeholders.

• Facilitate security reviews and technical discussions, enhancing engineering rigor across the team.

• Collaborate with engineering, data, and client teams to align security initiatives with business priorities and measurable outcomes.

• Establish security architecture and engineering standards, including responsible AI practices.

• Mentor and develop junior and mid-level engineers through coaching, code reviews, and pairing.

• Manage ambiguous, high-stakes projects through production, focusing on reliability, cost, and safety.

⛳️ Requirements

• Position is remote and based in the US; applicants outside of the US will not be considered.

• 7+ years of professional experience in security or software engineering.

• Minimum of 3 years leading application and cloud security projects.

• Extensive knowledge in application security, secure coding practices, and the OWASP Top 10.

• Strong background in threat modeling, penetration testing, vulnerability management, and secure code review.

• In-depth cloud security expertise across identity, network, and data layers.

• Solid experience in integrating security automation and policy-as-code into CI/CD pipelines.

• Proven experience in detection engineering, logging, and incident response at scale.

• Substantial experience securing AI and LLM-powered applications, including prompt injection, data leakage, model abuse, and agentic-AI threats.

• Familiarity with security, compliance, and governance frameworks.

• Demonstrated leadership and technical mentoring capabilities within a team or organization.

• Excellent communication skills with the ability to convey technical depth to diverse audiences.

• Proven, daily use of AI-forward tools such as Claude and Cursor, with expert knowledge.

• Exceptional problem-solving abilities and the capacity to navigate complex technical and business challenges with sound judgment.

🏝️ Benefits

• Paid time off

• Medical insurance

• Dental insurance

• Vision insurance

• 401(k)