3 months ago
Base Salary
$260k - $300k/yr
Responsibilities
- Design and harden sandboxing, isolation, and runtime controls for Devin’s execution of untrusted code.
- Lead threat modeling, secure design reviews, vulnerability management, and product and infrastructure security across Devin, Windsurf, and their underlying infrastructure.
- Build internal security systems for secrets management, identity and access, dependency security, and detection.
- Build the detection pipeline, lead incident response, and drive systemic remediation after security events.
- Partner with go-to-market and legal teams on compliance and customer trust initiatives.
Requirements
- Hands-on experience across product security, infrastructure security, and detection and response.
- Strong software engineering fundamentals with proficiency in Python, Rust, and Go and experience owning complex systems codebases.
- Practical experience securing Kubernetes, AWS, GCP, or Azure, and multi-tenant compute environments.
- Hands-on experience hardening complex modern web applications.
- Experience with threat modeling, adversarial analysis, and secure system design.
- Experience leading incidents end to end and driving follow-up fixes.
- Experience with security challenges involving autonomous agents and AI-native developer tools.
- Prior experience at a frontier AI lab, applied AI company, or developer tools company.
- BS, MS, or equivalent in Computer Science, Mathematics, Engineering, or a related technical discipline from a highly selective program.
Benefits
- Base salary of $260,000–$300,000 plus significant early-stage equity.
- Fully paid medical, dental, and vision coverage for the employee and dependents.
- 401(k) with company match.
- Perks include a private chef, cozy slippers, and endless snacks.
Categories
About Cognition
Cognition is an applied AI company building end-to-end software agents for engineering teams. Its flagship product, Devin, is an AI software engineer that collaborates with developers to plan tasks, write code, run tests, fix bugs, and ship changes across common tools. The company is privately held, founded in 2023, and headquartered in San Francisco.