4 hours ago
Base Salary
$180k - $280k/yr
Responsibilities
- Lead threat modeling, secure design reviews, and vulnerability management across SaaS, AI products, and infrastructure.
- Integrate and automate secrets, access, and dependency-security controls into engineering workflows and CI/CD pipelines.
- Establish code, dependency, secrets, and dynamic application security testing programs.
- Partner with penetration testers and manage external vulnerability reporting and triage.
- Develop secure-design and secure-coding training and processes for routing and remediating security issues.
- Respond to application-security incidents and coordinate remediation and post-incident improvements.
- Support customer security conversations and the technical aspects of SOC 2 and assurance work.
- Lead projects involving voice-agent adversarial detection, automated dependency patching, AI code-generation tools, and secure workforce integrations.
Requirements
- 5+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation.
- Experience writing and reviewing production code in a complex codebase.
- Strong risk judgment and the ability to balance security with engineering shipping velocity.
- Ability to use and evaluate AI tools for security investigation, testing, or remediation.
- Preferred experience with large-scale multi-tenant SaaS applications handling sensitive customer data.
- Preferred experience securing AI/ML applications, including prompt injection, unauthorized tool use, and adversarial-input protections.
- Familiarity with Assembled’s technology stack is preferred.
- Knowledge of SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS is preferred.
- Experience as a first or early security hire or building security practices without an established playbook is preferred.
Tech Stack
Categories
About Assembled
Assembled builds an AI-driven customer support and workforce management platform for companies running large-scale support operations. Its SaaS unifies AI agents, agent assist, and forecasting/scheduling to resolve inquiries and optimize staffing across in-house teams and BPOs. Founded in 2018 and headquartered in San Francisco, the privately held company is used by organizations such as Etsy, Robinhood, Stripe, and Canva to manage chat, email, and phone support.