3 days ago
Remote, MexicoMid Level
Responsibilities
- Build and maintain application-security tools, automation, libraries, and frameworks.
- Design custom Semgrep and CodeQL rules to detect and prevent vulnerability patterns.
- Integrate security tools, checks, and controls into engineering workflows and the Secure Development Lifecycle.
- Perform targeted code reviews and develop follow-up controls to prevent security regressions.
- Advise engineering and product teams on application security across web, mobile, and desktop environments.
- Support threat modeling, penetration-test and bug-bounty findings, security incidents, and security on-call rotations.
- Collaborate with engineering, product, GRC, and AI/ML teams to address security risks.
Requirements
- At least 4 years of experience in application security or security engineering roles.
- Hands-on experience building or using security automation tools to improve developer workflows and product security.
- Experience working across the Secure Development Lifecycle and interpreting penetration-test and bug-bounty findings.
- Familiarity with modern technology stacks, cloud-native environments, and software development workflows.
- Understanding of injection, XSS, authentication and authorization issues, and practical mitigation strategies.
- Ability to support multiple product and engineering teams in a cross-functional environment.
- Preferred experience includes custom security-rule development, internal libraries or frameworks, generative AI and machine-learning systems, data security, encryption, and production software development in modern languages.
- Preferred experience securing web, mobile, and native platforms and participating in security incident response or on-call rotations.
Categories
About Dropbox
Dropbox builds cloud storage, file sync, sharing, and collaboration tools for individuals and businesses, sold via subscriptions. Its portfolio includes Dropbox, Dropbox Sign for e‑signatures, and DocSend for document sharing and analytics. Founded in 2007 and headquartered in San Francisco, Dropbox is a public company on NASDAQ with more than 700 million registered users across 180 countries.