Security Engineer
San Francisco, CA • FullTime
Posted 1y ago
About the job
Sierra is building a platform to enable companies to create better, more human customer experiences with AI. As a Security Engineer, you will build the foundational systems and controls that ensure Sierra's AI agents are secure, protecting customer data and trust. You will partner across product and platform teams to integrate security, privacy, and safety as core product capabilities and secure defaults. This role involves designing and implementing systems across various security domains, including product security, infrastructure security, enterprise security, identity, and detection and response. You will identify risks, strengthen architectures, and build durable defenses, while also owning cross-cutting systems, threat modeling, code reviews, and evolving security primitives. The position requires a strong software engineering background, systems thinking, and the ability to automate and scale security workflows.
Responsibilities
- Design and ship systems and controls that make Sierra secure by default across product, infrastructure, enterprise security, identity, and detection/response.
- Identify risk, strengthen architectures, and build durable defenses across all layers of the platform.
- Partner with product, platform, and infrastructure teams to threat model designs, review code and architectures, and implement security primitives.
- Make pragmatic design trade-offs between usability, performance, reliability, and security.
- Identify vulnerabilities, investigate suspicious behavior, and improve detections and response workflows.
- Turn learnings into systemic fixes and controls to prevent entire classes of issues.
- Create developer-friendly tooling to automate security checks in CI/CD, build secure paved paths, improve vulnerability discovery, and instrument detection and response.
Requirements
- Strong security fundamentals and depth in at least one domain (product security, platform/cloud security, enterprise security, identity, detection/response, or offensive security).
- Ability to apply security expertise across unfamiliar systems and emerging threats.
- Product and platform mindset, focusing on building secure, scalable systems that enable innovation.
- Comfortable reading and writing code, understanding production systems, and building software solutions for security problems.
- Ability to reason about system design and contribute to APIs, services, and security controls.
- Curiosity and ownership to take ambiguous problems from first principles to production.
- Experience threat modeling distributed systems, tracing authorization decisions, or investigating security incidents.