1 day ago
Base Salary
$190k - $290k/yr
Responsibilities
- Design, deploy, and operate infrastructure-level security controls for Dropbox AI and agentic infrastructure, including cloud infrastructure, Kubernetes, and data stores.
- Design and implement authentication, authorization, and networking patterns for AI agents and other non-human actors.
- Lead security implementation for AI tools and governance.
- Review infrastructure stacks from a security perspective and provide hardening mechanisms and recommendations.
- Build, deploy, and operate security infrastructure for on-premises and cloud environments.
- Collaborate across teams and lead security initiatives that influence product decisions and improve security posture.
- Participate in an on-call rotation when assigned to a team with one.
Requirements
- At least 8 years of security experience with impactful contributions to security strategies.
- Hands-on experience securing agentic AI systems and addressing prompt injection, data or model poisoning, and AI supply-chain risk.
- Experience designing identity and authorization for non-human workloads and agents using frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud-provider equivalents.
- Experience with policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
- Experience with agentic frameworks and MCP tool integration.
- Experience with AWS, GCP, or Azure cloud security technologies.
- Proficiency in at least one scripting or high-level language such as Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, or Java.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience, with coding proficiency.
- Preferred experience includes MCP-based systems, multi-agent security controls, Kubernetes and container security, and security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM, or SOAR.
- Preferred qualifications include familiarity with NIST AI RMF, NIST SP 800-218A, OWASP LLM and agentic security guidance, CISSP or CISM certification, and security community involvement.
Benefits
- US Zone 2 and Zone 3 compensation ranges are provided; the role is not available in US Zone 1.
- Teams with on-call rotations require engineers to be available during core and non-core business hours.
Tech Stack
Categories
About Dropbox
Dropbox builds cloud storage, file sync, sharing, and collaboration tools for individuals and businesses, sold via subscriptions. Its portfolio includes Dropbox, Dropbox Sign for e‑signatures, and DocSend for document sharing and analytics. Founded in 2007 and headquartered in San Francisco, Dropbox is a public company on NASDAQ with more than 700 million registered users across 180 countries.