Senior Staff Security Engineer

What you'll do

• Build software supply chain protections including source code integrity, artifact signing, and provenance verification.
• Engineer systems to inventory open-source components, manage SBOMs, and automate dependency remediation.
• Develop scalable application security platforms integrating SAST, DAST, and AI-powered analysis into CI/CD pipelines.
• Translate threat models into engineering controls, secure defaults, and reusable libraries across cloud and AI workflows.
• Build continuous offensive security capabilities by developing automated penetration testing and exploit validation systems.
• Create AI-powered security tools and perform adversarial testing on LLM integrations and autonomous agents.
• Write production-quality code to operate reliable distributed services and define architectural standards.
• Mentor senior engineers and lead design reviews to embed security into existing developer workflows.

What we're looking for

• 10+ years of experience in software engineering, security engineering, or related technical fields.
• Advanced proficiency in Go, Java, Python, C++, or a comparable language.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
• Experience building large-scale distributed systems, developer platforms, security services, or infrastructure.
• Expert-level depth in application security, software supply chain security, or DevSecOps.
• Expert-level depth in penetration testing, vulnerability research, exploit development, or adversarial testing.
• Strong fundamentals in network, cloud, and infrastructure security, including Kubernetes and microservices.
• Experience building with LLMs, frontier models, or autonomous agents for security discovery and remediation (preferred).