Staff Application Security Engineer

Role overview

This staff-level application security role leads security practices for AI features and agent-based systems while remaining hands-on in design and delivery. You will set review standards, build tools that help the security team scale its work, and influence engineering processes across teams, including how AI-related security requirements are evaluated and enforced.

Responsibilities

- Lead security reviews and threat modeling for AI features, autonomous agents, protocol servers, and third-party integrations; keep review guidance current. - Define safeguards for agent identity and delegated access, scoped data permissions, untrusted tool outputs, supply-chain risks, and human approval of consequential actions. - Design and ship security-team agents for tasks such as finding validation, triage, review support, and remediation, with bounded permissions and clear evaluation criteria. - Work with engineering and product leaders to add security requirements and review gates to development and release workflows. - Coordinate multi-team security programs, track goals and dependencies, and report progress, risks, and tradeoffs to leadership. - Partner with privacy, legal, and governance teams to turn AI policy into technical controls; coach developers and security peers and support escalated incidents as needed.

Requirements

- Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience. - At least 8 years in security, including 5 or more years of hands-on application security work. - Experience securing multi-tenant SaaS systems, including tenant isolation, and familiarity with cloud and infrastructure security. - Hands-on experience building AI agents or agentic workflows, with practical examples of managing permissions, failures, and validation. - Ability to lead security work across teams, communicate tradeoffs, and coach engineers on secure design and threat modeling.

Benefits and work setup

The listing describes the position as remote within a specified state. Benefits include health, life, and disability insurance; vacation, company holidays, parental and volunteer leave; a retirement plan with up to a 6% match; and an employee assistance program.