Security Engineer II, Design Review / Threat Modelling

What you'll do

• Conduct security design reviews and threat modeling for services, APIs, infrastructure, and AI systems.
• Perform hands-on penetration testing to identify exploitable vulnerabilities and complex attack paths.
• Assess third-party AI agents through adversarial testing to identify risks in behavior and data access.
• Build AI-powered automation to scale security design reviews and penetration testing efforts.
• Translate offensive security findings into systemic improvements and actionable guidance for engineering teams.
• Analyze engineering proposals to identify flaws in cloud, infrastructure, and data-layer security.
• Provide corrective guidance on complex design trade-offs to improve the overall security posture.

What we're looking for

• 3+ years of professional experience in security engineering, systems architecture, or a related software engineering field.
• Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
• Proven ability to analyze complex system designs and provide technical input to solve security challenges with multiple dependencies.
• Broad knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
• Experience with security designs related to cloud-native services, microservices, or distributed systems.
• Hands-on experience performing security design reviews and threat modeling across complex applications, services, APIs, and cloud infrastructure (preferred).
• Advanced proficiency in at least one backend language such as Go, Java, or Python to evaluate code-level security (preferred).
• Experience applying AI/LLMs, agents, or automation frameworks to security testing or vulnerability discovery (preferred).