Staff Security Software Engineer

About Luma

The company is focused on building foundational models for AI, with a top-tier research team, an enormous compute budget, and a commitment to transforming creative work through innovative products.

Senior Security Lead

We are seeking a senior, hands-on security leader to build the security foundations that support Luma's growth. The role involves designing and shipping platform security systems and operational tooling, including auth and identity infrastructure, fine-grained access scoping, break-glass escalation systems, and agent permission frameworks. The ideal candidate will also collaborate with engineering teams to automate secure practices and strengthen incident detection and response capabilities.

Responsibilities

• Design and mature how access to production systems is granted and governed
• Implement scalable RBAC / ABAC approaches across infrastructure and products
• Build robust secrets management and credential lifecycle practices
• Establish strong encryption and key management patterns
• Create auditability and forensic visibility for user and system actions
• Lead threat modeling across infrastructure, product, and research domains
• Collaborate with engineering teams to make secure patterns easy and automatic
• Help drive readiness for enterprise security expectations and reviews
• Strengthen incident detection and response capabilities
• Raise the company’s security bar while preserving development velocity

Requirements

• You have built and operated security foundations in real production environments
• You are excellent at writing code, reviewing infrastructure, and shipping systems
• You recognize that in AI platforms, software systems can act with real authority
• You’ve thought deeply about how services, automations, or models are scoped, constrained, and observed
• You think in terms of systems and trust boundaries
• You have high agency—you identify problems and drive them to resolution
• You can balance pragmatism with long-term rigor
• Engineers trust you and enjoy partnering with you

Qualifications

• Strong opinions on how autonomous systems should be permissioned and governed
• Experience implementing least-privilege access and modern identity models
• Strong understanding of securing multi-tenant AI platforms
• Experience building detection and response capabilities in high-growth environments
• Ability to represent the company in detailed customer and partner security discussions
• Ability to build platforms and pave roads that engineers love to use

What Sets You Apart

• Experience helping organizations evolve toward mature, scalable security architectures
• Experience implementing least-privilege access and modern identity models
• Experience building durable approaches to secrets management and credential lifecycle
• Understanding of the nuances of securing multi-tenant AI platforms
• Strong opinions on how autonomous systems should be permissioned and governed
• Experience building detection and response capabilities in high-growth environments
• Ability to represent the company in detailed customer and partner security discussions
• Ability to build platforms and paved roads that engineers love to use

Why This Role Exists

AI systems are becoming actors. They retrieve data, call tools, and take actions independently. Security is no longer just about who can log into a machine. It’s about defining how authority is granted, constrained, observed, and trusted across humans and intelligent systems. We are building those foundations now.