Software Engineer, Security
Thinking Machines Lab5 days ago
Base Salary
$350k - $475k/yr
Responsibilities
- Partner with product and research teams on threat modeling, design reviews, and secure defaults throughout the development lifecycle.
- Design and implement security controls across the product stack, including authentication, authorization, session management, and input validation.
- Build and maintain security tooling and automation, including secure frameworks and templates, dependency management, and vulnerability detection.
- Identify and mitigate AI-specific product risks such as model abuse, prompt injection, data leakage, and misuse of capabilities.
- Improve observability and detection for access anomalies, abuse patterns, suspicious behavior, and other security-relevant production events.
Requirements
- Bachelor’s degree or equivalent experience in computer science, engineering, or a similar field.
- Proficiency in at least one backend language, specifically Python or Rust.
- Strong generalist software engineering background with the ability to review production code for security risks.
- Hands-on experience securing web applications and APIs, including authentication flows, access control, secrets management, input validation, and data protection.
- Familiarity with common vulnerability classes and prevention frameworks, including experience hardening prototypes for production.
- Understanding of modern cloud infrastructure and how application concerns intersect with infrastructure.
- Ability to work across the stack and own projects end-to-end.
- Preferred qualifications include experience securing AI-powered products or working with ML or LLM APIs and their threat models.
- Preferred qualifications include a human-computer interaction background involving security or trust in user experience.
- Preferred qualifications include rapid prototyping, reusable security patterns and tools, open-source security work, bug bounty write-ups, or published tooling.
Benefits
- Generous health, dental, and vision benefits.
- Unlimited paid time off.
- Paid parental leave.
- Relocation support as needed.
- Visa sponsorship is available.
- Role is based in San Francisco, California.
- This is an evergreen role reviewed on an ongoing basis; applicants should avoid reapplying more than once every six months.