Senior Security Engineer

Job Summary

Partnering with product and engineering teams, the full-time Senior Security Engineer will focus on building production security services, adversarially testing AI features, and ensuring product security outcomes in a remote environment.

Key responsibilities

• Adversarially test AI and LLM-backed features, designing and executing attacks to establish pass/fail criteria for product teams
• Build and operate production security services, ensuring high standards for test coverage, CI, and dependency management
• Conduct threat modeling from product designs, reviewing PRDs and technical designs to raise security questions early in the development process

Required qualifications

• Strong backend engineering experience in at least one modern programming language, with familiarity across TypeScript, Node.js, .NET, and Python
• Proven ability to read and analyze code across multiple languages to assess security findings and propose actionable fixes
• Understanding of identity and authorization vulnerabilities, including token exchange, session management, and OAuth pitfalls
• Experience with API security standards, including REST and GraphQL, and knowledge of input validation and rate limiting
• Hands-on testing experience with web applications and APIs, including manual testing and vulnerability triage