Senior Security Engineer

About the role

This organization provides a cloud networking platform that secures, transforms, and routes traffic to services running anywhere. It addresses the challenge developers face in managing multiple networking tools by offering a unified gateway solution suitable for sharing local applications or running AI workloads in production. Trusted by over 9 million developers at various companies, the platform has evolved from enabling local apps on public URLs to supporting API delivery, AI inference, device fleets, and site‑to‑site connectivity, with the capability to handle production traffic at scale.

The Senior Security Engineer will establish and lead the security program from the ground up for the platform, which occupies a critical position in internet traffic flow. This role is responsible for defining security practices, collaborating with engineering, infrastructure, and leadership teams to create automated guardrails, secure defaults, and self‑service tools. The position significantly influences the organization’s security posture amid a rapidly evolving threat landscape.

Responsibilities

• Audit current security tooling, pipeline coverage, cloud posture, and detection capabilities to develop a prioritized security roadmap aligned with business objectives.
• Develop developer‑facing security tools including automated CI/CD checks, secrets scanning, dependency vulnerability tracking, and secure‑by‑default libraries.
• Conduct structured risk assessments across products and infrastructure to identify gaps and necessary changes.
• Implement policies and tooling to safely integrate AI in the engineering pipeline without adding new risks.
• Establish baseline detection and response processes including logging, alerting, and incident response documentation.
• Manage the security engineering program end‑to‑end with clear ownership, documented controls, metrics, and internal platforms that reduce the security burden on engineers.

Requirements

• Experience in security engineering roles involving the delivery of tooling, automation, or ownership of security infrastructure.
• Proficiency in writing quality code in Go, Java, Rust, C, or C++.
• Ability to integrate security checks into CI/CD pipelines without hindering team velocity.
• Hands‑on experience with cloud security, especially AWS services such as IAM, VPC, CloudTrail, and GuardDuty.
• Understanding of AI/ML security risks including prompt injection, insecure code generation, and LLM‑assisted attack vectors.
• Bonus: Experience building internal security platforms, detection engineering, or securing networking/developer infrastructure products.

Pay

Compensation will be evaluated based on qualifications, experience, potential impact, and work location, including salary and equity components.

• Tier 1 locations (San Francisco, Los Angeles, Seattle, New York City): $234,000 – $286,000
• Tier 2 locations (rest of US): $215,280 – $263,120

Benefits

• Full premiums covered for base healthcare, dental, and vision insurance for employees; 50% coverage for dependents.
• Mental health and well‑being support.
• 401(k) retirement plan with 100% match up to 3% of salary and 50% match up to an additional 2%.
• Flexible vacation policy.