Member of Technical Staff, Product Security

4 нед. назад

150k–300k USD / годСШАLeadOnsite

application securityauthenticationauthorizationsecurity tooling

Build and operate security systems for AI web infrastructure products, focusing on application security, tooling, and secure development processes.

is a web infrastructure company. Our products are used by leading businesses in sales, marketing, insurance, and coding to build best-in-class AI agents with flexible and powerful programmatic access to the web.
We've raised $230 million from Kleiner Perkins, Sequoia, Index Ventures, Spark Capital, Khosla Ventures, First Round, and Terrain to build the web for AIs. We're currently valued at $2 billion and we're forming a world-class team of engineers, designers, marketers, sellers, researchers, and operational experts to achieve our mission.
Our team works fully in-person , between our Palo Alto HQ and San Francisco office. We’re a flat, talent-dense organization dedicated to solving technical and creative problems.
We seek like-minded individuals who share our passion for applying science, creativity, and consistency to big and complex problems with equally big outcomes. These are our values:
Own customer impact: It’s on us to ensure real-world outcomes for our customers.
Obsess over craft: Perfect every detail because quality compounds.
Accelerate change : Ship fast, adapt faster, and move frontier ideas into production.
Create win-wins : Creatively turn trade-offs into upside.
Make high-conviction bets : Try and fail. But succeed an unfair amount.

You will build and operate the security systems that let ship quickly without creating avoidable risk. You will work across application security, secure defaults, AI-assisted security tooling, and the unique attack surface of agentic systems that consume untrusted web content. You will fix real vulnerabilities when they appear, then change the underlying systems so the same class of issue is harder to introduce again.
You will also help define how security fits into the development process: building reusable patterns for authentication, authorization, data handling, and outbound access, designing controls for enterprise customers, and ensuring security review happens as part of how software gets built rather than as a separate process at the end.

Have deep intuition on application security, software architecture, and how vulnerabilities emerge in real systems. You are comfortable finding issues yourself, but care more about eliminating vulnerability classes through better libraries, frameworks, and defaults.
You still like to write production code and have strong opinions on where current AI models are useful for security work and where they mostly create noise. You are comfortable operating independently, prioritizing the highest-leverage problems, and working directly with both engineers and customers.
Significant software engineering experience, including several years focused on product or application security
Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation
Built frameworks, libraries, or secure defaults that reduced entire classes of vulnerabilities across a codebase or engineering organization
Experience building security tooling using current AI models, such as automated code review, threat modeling, triage, agent harnesses, or evaluation systems
Experience securing systems that process untrusted inputs, especially LLM or agentic systems
Ability to work independently as the primary security owner and make clear prioritization decisions
Strong production coding skills in Python, Go, TypeScript, or similar languages
Experience with GCP, Kubernetes, security research, open source security tooling, or conference talks is a plus