Senior Security Software Engineer, Advanced Security

Description

The company's advanced security engineering team is newly forming and builds capabilities that find and reduce real exposure across the company. It uses AI to strengthen defenses, test for weaknesses, and support authorized offensive testing in controlled settings.

The team pairs security findings with code, cloud, and runtime context to pinpoint problems that can actually be reached, then helps fix, mitigate, or detect them.

You will build and run the cloud services and AI agents behind this work. They process untrusted code and sensitive security data, and they give agents controlled access to tools and compute, so getting that access right is central to the job.

This is a senior individual contributor role. You will work with little direction, turn vague problems into workable engineering plans, and own delivery across teams. When information is incomplete, you will make sound calls and bring your work to review at key decision points. You are responsible for the reliability, security, and cost of what you ship.

Because the team is new, you will help decide what gets built, not just how. You will work with security specialists and mentor other engineers.

Responsibilities

• Build and run production cloud services in Python, covering containerized workloads, event-driven processing, and data storage.
• Write and maintain the infrastructure as code that supports these services.
• Connect security tools, source control, and cloud APIs. Create AI agents that sort findings, collect evidence from source code and cloud configuration, and suggest fixes.
• Create and harden sandboxes where AI-driven tests run against authorized targets. Layer defenses so that no single containment boundary is a point of failure.
• Limit agent reach through isolation, least-privilege identities, egress restrictions, and secrets management. Keep agents that produce results separate from those that verify them. Treat code, tool output, and model responses as untrusted, guard against prompt injection, and keep sensitive data out of prompts and logs.
• Measure model accuracy, cost, and latency to choose models and catch regressions. Use that data to explain trade-offs and improve the systems you own.
• Work with application security, penetration testing, and cloud security engineers to turn their expertise into repeatable checks. Explain technical risk to non-specialists, review code, and mentor less-experienced engineers through feedback and joint problem-solving.

Requirements

• A bachelor's degree in computer science, cybersecurity, engineering, or a related field, or equivalent hands-on experience.
• At least 5 years in software, cloud, or security engineering.
• A solid record of writing production Python.
• Hands-on work with infrastructure as code such as Terraform, and with CI/CD on a major cloud platform.
• Working knowledge of application security: common vulnerability classes, how security scanners operate, and where they produce false positives.
• A track record of building secure systems with least privilege, secrets management, isolation, and careful handling of untrusted input.
• Ability to own work across teams, decide well with partial information, and explain technical risk to people outside security.
• Experience using agentic LLM tools and solutions.
• Preferred: experience building applications with large language models and agent frameworks, including tool use and output evaluation.
• Preferred: experience with containers and Kubernetes.
• Preferred: experience with sandboxing and isolation, or with securing systems that run untrusted code.
• Preferred: experience with static or program analysis, such as writing Semgrep or CodeQL rules.
• Preferred: experience in vulnerability research, penetration testing, or exploit development.
• Preferred: familiarity with AI security risks and controls, such as the OWASP Top 10 for LLM Applications.
• Preferred: public examples of shipped work, such as open-source contributions, published tools, or technical write-ups.

Conditions

This is a hybrid role. You are expected to report to a specific location at least 3 times a week, or at a frequency your manager sets.

The company does not provide immigration-related sponsorship for this role. Do not apply if you will need company immigration sponsorship now or in the future, including direct sponsorship, the company as employer of record on a government form, or any work authorization that requires a written submission or other company immigration support (for example H1-B, OPT, STEM OPT, CPT, TN, or J-1).

Relocation benefits are available to candidates who qualify under company policy.

You may be required to complete a role-related assessment and/or a pre-employment screening before you start.

The company is committed to a workplace free of unlawful discrimination that fosters inclusion and belonging.

Benefits

• Total Rewards programs support your well-being at work and at home from day one, and details are available in the company's Total Rewards resources.