3 days ago
Remote, United StatesMid Level
H1B sponsor
Base Salary
$172k - $262k/yr
Responsibilities
- Build and maintain security tools, automation, and libraries for secure-by-default development.
- Design and implement custom Semgrep and CodeQL security rules.
- Integrate security tools, checks, and processes into engineering workflows and the SDLC.
- Perform targeted code reviews and develop controls to prevent vulnerability regressions.
- Support teams with threat modeling, documentation, education, penetration-test findings, and bug bounty reports.
- Collaborate with engineering, product, GRC, and AI/ML teams on application security risks.
- Participate in security on-call rotations when required by the team.
Requirements
- 4+ years of experience in application security or security engineering roles.
- Hands-on experience building or using security automation tools for developer workflows and product security.
- Experience working across the SDLC and interpreting penetration-test and bug-bounty findings.
- Familiarity with modern technology stacks, CI/CD pipelines, microservices, and cloud-native environments.
- Understanding of common vulnerability classes and practical mitigation strategies.
- Ability to support multiple product and engineering teams in a cross-functional environment.
- Preferred qualifications include custom security-rule development, production software development, machine learning or generative AI security experience, internal library or framework development, securing web/mobile/native applications, and data security involving protection, access control, and encryption.
- Experience supporting incident response or security on-call rotations is a plus.
Benefits
- The role is not available in US Zone 1.
- Compensation is listed for US Zone 2 and US Zone 3.
- Teams with on-call rotations require engineers to be available during core and non-core business hours.
Categories
About Dropbox
Dropbox builds cloud storage, file sync, sharing, and collaboration tools for individuals and businesses, sold via subscriptions. Its portfolio includes Dropbox, Dropbox Sign for e‑signatures, and DocSend for document sharing and analytics. Founded in 2007 and headquartered in San Francisco, Dropbox is a public company on NASDAQ with more than 700 million registered users across 180 countries.