Senior/Staff Security Engineer

Key Information:
Work Model: On-site, Monday to Friday
Employment Type: Full-time
Visa Sponsorship: H1B transfers
Experience: 4+ years

Key Responsibilities:
-Own the end-to-end security posture across application, cloud, network, infrastructure, and the AI agent
-Lead secure architecture reviews and threat modeling for agentic systems with governed identities and scoped access
-Design and implement security primitives including customer isolation, credential protection, approval gates, capability controls, and comprehensive audit trails
-Develop and maintain the security architecture documentation used during enterprise customer evaluations
-Lead penetration testing, external security assessments, compliance preparation, and enterprise security reviews
-Establish incident response processes and breach notification readiness
-Continuously audit cloud infrastructure, IAM configurations, access policies, and security controls
-Integrate vulnerability scanning, secret detection, security testing, and compliance checks into CI/CD pipelines
-Define and enforce standards for customer credential handling, data egress, endpoint security, and access management

Requirements:
-4+ years of hands-on application and infrastructure security experience
-Strong production coding experience in Python, Go, Rust, or TypeScript
-Practical experience with threat modeling, vulnerability identification, and secure system design
-Hands-on experience with network security and identity security
-Strong understanding of identity-based controls, policy enforcement, and workload IAM
-Deep cloud security experience with at least one major cloud provider
-Experience with identity federation and infrastructure-as-code security
-Strong understanding of secure application and infrastructure architecture
-Ability to communicate security risks and trade-offs clearly to both engineering teams and executive stakeholders
-High level of autonomy and comfort working in an early-stage environment with significant ambiguity
-Willingness to work onsite in San Francisco, Monday through Friday, in a high-intensity startup environment