Staff Security Engineer
Rox Data Corp12 days ago
Responsibilities
- Own Rox’s security program, roadmap, and secure engineering standards.
- Run and tune security tooling across CI, runtime, and testing; triage findings and drive remediation to completion.
- Review designs and production code, and build guardrails and paved roads for secure development.
- Secure tenant isolation, AuthN, AuthZ, and RBAC across the agent runtime and customer-facing APIs.
- Harden cloud infrastructure, including IAM, secrets, network segmentation, encryption, logging, and detection.
- Secure the software supply chain and respond to newly disclosed vulnerabilities and compromised packages.
- Design security architecture for customer-managed keys, security log export, single-tenant deployments, and customer-cloud deployments.
- Lead enterprise customer security reviews and architecture discussions.
- Partner with Compliance on audits, questionnaires, and trust materials.
- Build and operate incident-response processes, including playbooks, postmortems, customer communication, and on-call coverage.
- Monitor the threat landscape and translate industry incidents into security actions.
Requirements
- 10+ years of experience in security engineering, application security, or infrastructure engineering with a strong security focus, including Staff-level scope.
- Strong software engineering skills and the ability to read, write, and ship production code in Python, TypeScript, or similar.
- Deep experience securing AWS or another major cloud, including IAM, KMS, networking, containers, and infrastructure as code.
- Hands-on application security experience with threat modeling, secure code review, OWASP Top 10, AuthN, AuthZ, and multi-tenant data isolation.
- Experience with vulnerability management, detection, and incident response in production.
- Ability to work directly with enterprise customers on security reviews and architecture discussions.
- Ability to make sound risk judgments and clearly explain tradeoffs.
- Located in or willing to relocate to San Francisco.
- Preferred: experience supporting SOC 2 Type II, ISO 27001, or similar audits.
- Preferred: experience building customer-managed key systems, security log integrations, or single-tenant deployment models.
- Preferred: experience securing LLM and agent systems, including prompt injection, tool and data access controls, and secure handling of customer data in AI pipelines.
- Preferred: offensive security or penetration testing experience.
Benefits
- Competitive pay with considerable equity upside.
- Medical, dental, and vision plans with 100% company-paid coverage for the employee and eligible dependents.
- Company-paid life and AD&D insurance, plus short- and long-term disability.
- 401(k) with automatic enrollment.
- Unlimited PTO, paid sick leave, company holidays, and bereavement leave.
- Up to 20 weeks of paid parental leave at 100% pay.
- $375-per-quarter wellness stipend and up to $2,000-per-year learning stipend.
- $25-per-month internet and cell phone stipend.
- Mental health support, virtual care, care navigation, fertility and family-building support, and backup care membership.
- Pre-tax commuter benefits, daily catered breakfast and lunch, meal allowances, and rideshare support.
- Onsite role at Rox’s San Francisco headquarters with participation in a security incident on-call rotation.
Tech Stack
Categories
About Rox Data Corp
Rox Data Corp builds AI-powered software and agentic automation to help sales, RevOps, and finance teams secure and grow revenue. Its products cover sales automation, revenue assurance, and fintech workflows, offered as subscription software and services. Founded in 2024 and headquartered in San Francisco, the privately held company maintains an in-office, five-days-a-week policy.