10 hours ago
Remote, United StatesSenior
Base Salary
$184k - $250k/yr
Responsibilities
- Establish secure software development standards and integrate security into engineering design and development.
- Create documented review workflows, reusable tools, and secure design patterns that enable engineering teams to build and deploy securely.
- Perform design and code reviews, threat modeling, security assessments, and sandbox isolation reviews for GenAI, Creative GenAI, and emerging businesses.
- Triage security issues, prioritize vulnerabilities by risk, and partner with engineering teams on remediation and verification.
- Assess vendors and AI tools for security controls and safe employee use.
- Build security tools and automation, including an AI-assisted code-security triage pilot.
- Partner with Detection & Response to improve detections and response guidance based on application-security findings and threat models.
- Participate in security on-call and incident-response rotations, conduct blameless post-incident reviews, and track remediation.
- Contribute to application, cloud, infrastructure, Accelerate, and MX security priorities as needed.
Requirements
- 5+ years of relevant experience in security engineering or software engineering.
- Experience partnering cross-functionally to deliver security improvements and recommend practical fixes.
- Ability to write production-quality code for security tools and automation, review pull requests, and navigate large codebases.
- Strong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review.
- Experience assessing cloud and infrastructure security beyond a primary application-security specialty.
- Ability to understand complex engineering systems and architecture quickly.
- Experience with testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
- Strong technical writing and communication skills for design documents, proposals, runbooks, and post-incident reviews.
- Willingness to participate in on-call and incident-response responsibilities, including occasional off-hours response.
- Preferred experience with Go, Python, Clojure, or JavaScript.
- Preferred experience securing GenAI applications, designing sandboxes, evaluating AI-assisted security tools, scaling cloud security, or working in high-volume SaaS environments.
Benefits
- Eligible for full-time remote work in approved U.S. states and Canada.
- Remote-first company with U.S. hubs in Redwood City, Los Angeles, and New York City.
- Employees are expected to attend in-person project meetings, regional meetups, or company-wide gatherings at least once per quarter.
- Opportunities for in-person team gatherings and company-wide events.
- Benefits may include medical coverage, wellness stipends, equity, and additional perks based on country of residence.
Tech Stack
Categories
About Liftoff
Liftoff builds an AI-driven performance marketing and monetization platform for mobile apps, used by both marketers and publishers. Its products—including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange—support user acquisition, retargeting, and programmatic demand. Founded in 2012 and headquartered in Redwood City, CA, Liftoff is owned by Blackstone and reports serving over 6,600 mobile businesses across 74 countries.