Senior Security Engineer

Partnering with product and engineering teams, the full-time Senior Security Engineer will focus on building production security services, adversarially testing AI features, and ensuring product security outcomes in a remote environment. Key responsibilities Adversarially test AI and LLM-backed features, designing and executing attacks to establish pass/fail criteria for product teams Build and operate production security services, ensuring high standards for test coverage, CI, and dependency management Conduct threat modeling from product designs, reviewing PRDs and technical designs to raise security questions early in the development process Required qualifications Strong backend engineering experience in at least one modern programming language, with familiarity across TypeScript, Node.js, .NET, and Python Proven ability to read and analyze code across multiple languages to assess security findings and propose actionable fixes Understanding of identity and authorization vulnerabilities, including token exchange, session management, and OAuth pitfalls Experience with API security standards, including REST and GraphQL, and knowledge of input validation and rate limiting Hands-on testing experience with web applications and APIs, including manual testing and vulnerability triage