Sr. Security Engineer

Proven experience securing enterprise SaaS applications, including authentication flows, authorization patterns, and input validation at API boundaries.

Demonstrated experience securing deployment and change-management mechanisms for software and infrastructure.

Background in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security, or Application Security.

Hands-on code review experience, ideally in Go, Python, or Rust.

Experience with AWS (or another major cloud provider) and comfort working across cloud infrastructure.

Comfortable working both independently and collaboratively in a fast-paced, high-growth environment.

Curious and current on modern security practices, tooling, and emerging threats, including how AI is changing the threat landscape.

Someone to participate quarterly in-person in one of our primary offices San Francisco, or Portland Oregon.

This role expects real, hands-on experience building agents and automation for security, so we ask candidates to show it rather than just claim it. As part of the process, be ready to share one or more of the following:

A project, demo, or repo where you built an agent, skill, or automation that replaced manual security work (triage, review, detection, etc.).

Examples of how you use AI coding tools or agentic workflows in your day-to-day work.

A short walkthrough - live or recorded - of a security automation you shipped, including the problem, your approach, and the impact.

We care about practical results and good judgment in where (and where not) to apply automation, not just familiarity with the latest tools.

Experience with Kubernetes, service mesh, or PKI/network technologies (Consul, Envoy, Cilium, Vault, Istio, etc.).

Experience building or extending internal security tooling, automations, or agents.

Prior experience at a high-growth SaaS or identity/access management company.

This is a high-leverage role on a small, early-stage security team: your scope will be broad, your ownership will be real, and the systems you build will shape how a security-first company secures its own products and development lifecycle. You'll have the chance to specialize in the domain you care most about while still touching the full breadth of the security program.