3 days ago
Base Salary
$175k - $215k/yr
Responsibilities
- Own product and platform security across LangSmith, LangGraph, and the LangChain SDK ecosystem.
- Define and implement secure authentication, authorization, token lifecycle, service-to-service authentication, and tenant-isolation controls.
- Write secure code, conduct code reviews, and introduce linting, dependency scanning, SBOM, and software-provenance checks.
- Harden networks, Kubernetes environments, secrets management, key rotation, IAM, and egress controls.
- Develop incident-response runbooks and detection rules, lead tabletop exercises, and conduct post-incident forensics and root-cause analyses.
- Own vulnerability scanning, triage, patch SLAs, and coordination with engineering teams on remediation.
Requirements
- 5+ years of security engineering experience with strong software development skills in Python or Go; TypeScript experience is a plus.
- Depth in cloud and Kubernetes security, including GCP or AWS IAM, workload identity, admission controls, and network policies.
- Hands-on application security experience with code review, threat modeling, secure design, secrets and key management, authentication and authorization, and multi-tenant isolation.
- Experience building detection and response capabilities and running incident management.
- Familiarity with software supply-chain security, SBOM, sigstore/cosign, SLSA-style controls, and dependency risk management.
- Clear and pragmatic communication with engineers and customers.
- Preferred: security experience for SaaS and self-hosted or air-gapped offerings.
- Preferred: exposure to SOC 2 or ISO 27001 programs and evidence automation.
- Preferred: Go services, Terraform, Helm, and policy-as-code tools such as OPA/Gatekeeper or Kyverno.
- Preferred: knowledge of privacy patterns including data minimization, retention, masking, and workspace scoping.
Benefits
- Annual base salary range of $175,000-$215,000 USD for Senior Engineers.
- Meaningful equity, medical, dental, and vision coverage, flexible vacation, a 401(k) plan, life insurance, and meals on in-office days in the US.
- Locally competitive benefits are provided for team members in the EU, UK, and APAC.
- The role is hired across a range of scope, with compensation determined by impact, craft, leadership, communication, role level, and location.
Categories
About LangChain
LangChain builds open-source frameworks and a commercial platform for developing, evaluating, deploying, and operating LLM-powered agents and applications. Its LangSmith suite provides observability, testing, deployment, and governance for enterprise AI workloads; customers include Nvidia, LinkedIn, Workday, and Bridgewater. Privately held and headquartered in San Francisco, the company was founded in 2022.