Staff Security Engineer
Rox Data Corp2 days ago
Responsibilities
- Own Rox’s security program, roadmap, and secure engineering standards.
- Run security tooling across CI, runtime, and testing; triage findings and drive remediation to completion.
- Review designs and production code for features, agent capabilities, integrations, and public APIs, and build secure engineering guardrails.
- Secure tenant isolation, authentication, authorization, and RBAC across the agent runtime and customer-facing APIs.
- Harden cloud infrastructure, including IAM, secrets, network segmentation, encryption, logging, and detection.
- Secure the software supply chain and respond to newly disclosed vulnerabilities and compromised packages.
- Design security architecture for enterprise deployment models, including customer-managed keys, security log export, single-tenant deployments, and customer-cloud deployments.
- Lead customer security reviews and participate in enterprise security architecture discussions.
- Partner with Compliance on audits, questionnaires, and trust materials.
- Build and operate incident-response playbooks, postmortems, and customer communications.
- Participate in an on-call rotation for security incidents.
- Monitor the threat landscape and translate industry incidents into concrete security actions.
Requirements
- 10+ years of experience in security engineering, application security, or infrastructure engineering with a strong security focus, including Staff-level scope.
- Strong software engineering skills and the ability to read, write, and ship production fixes in Python, TypeScript, or similar languages.
- Deep experience securing AWS or another major cloud, including IAM, KMS, networking, containers, and infrastructure as code.
- Hands-on application security experience with threat modeling, secure code review, OWASP Top 10, authentication, authorization, and multi-tenant data isolation.
- Strong security and systems fundamentals across tools and vendors.
- Experience operating vulnerability management, detection, and incident response in production.
- Experience working directly with enterprise customers on security reviews and architecture discussions.
- Sound risk judgment and the ability to explain security tradeoffs clearly.
- Located in or willing to relocate to San Francisco for an onsite role.
- Preferred: experience supporting SOC 2 Type II, ISO 27001, or similar audits.
- Preferred: experience building customer-managed key systems, security log integrations, or single-tenant deployment models.
- Preferred: experience securing LLM and agent systems, including prompt injection, tool and data access controls, and secure customer-data handling in AI pipelines.
- Preferred: offensive security or penetration-testing experience.
Benefits
- Competitive pay with considerable equity upside.
- 100% company-paid medical, dental, and vision plans for employees and eligible dependents.
- Company-paid life and AD&D insurance, plus short- and long-term disability coverage.
- 401(k) with automatic enrollment.
- Unlimited PTO, paid sick leave, company holidays, and bereavement leave.
- Up to 20 weeks of paid parental leave at 100% pay for birth, adoption, or foster care.
- Wellness stipend, learning stipend, and internet and cell phone stipend.
- Mental health support, virtual care, care navigation, fertility and family-building support, and backup care membership.
- Pre-tax commuter benefits for transit and parking.
- Onsite at the San Francisco headquarters, with catered breakfast and lunch, meal allowances, and rideshare support for commuting.
Tech Stack
Categories
About Rox Data Corp
Rox Data Corp builds AI-powered software and agentic automation to help sales, RevOps, and finance teams secure and grow revenue. Its products cover sales automation, revenue assurance, and fintech workflows, offered as subscription software and services. Founded in 2024 and headquartered in San Francisco, the privately held company maintains an in-office, five-days-a-week policy.