Software Engineer, Security
San Francisco, CA • FullTime
Posted 8mo ago
About the job
Sierra is building a platform to enable companies to create better, more human customer experiences with AI. We are a primarily in-person company based in San Francisco, with growing offices globally. Our Security Engineering team builds the foundational systems that allow Sierra to deliver powerful AI agents while protecting customer data and trust. We collaborate across product and platform teams to ensure security, privacy, and safety are core product capabilities and secure defaults.
Responsibilities
- Design and ship systems to secure Sierra's platform, including agent safety/security, privacy, identity, authentication, authorization, and data security across all production layers.
- Implement and evolve trust primitives such as identity management, access control, auditability, and data lifecycle management, balancing usability, performance, and security.
- Build controls to prevent AI agents from leaking customer data, executing unauthorized actions, or behaving unintentionally, including runtime policy enforcement, safe agent sandboxing, and data protection boundaries.
- Create developer-friendly tooling to automate security checks in CI/CD, enforce privacy boundaries via schema validation, and instrument runtime monitoring for sensitive events.
Requirements
- Experience building and maintaining production systems.
- Comfort designing APIs, integrating with authentication or identity frameworks.
- Thoughtful use of AI-assisted development tools to build, test, and ship high-quality code.
- A security mindset, considering data flow, storage, access, least privilege, and transparency.
- A product and platform mindset, focusing on building secure, scalable systems that enable innovation.
- Ability to take ambiguous, cross-cutting problems from conception to production.
- Experience with privacy, identity, trust & safety, authN/authz, or data protection systems.
- Experience building security frameworks, libraries, or tooling for developers.
- Integration of security automation into CI/CD pipelines.
- Exposure to AI systems or designing secure-by-default LLM applications.
- An attacker mindset, identifying potential security issues.
- Experience finding or fixing security issues in production systems.
- Thrive in 0→1 environments balancing speed, reliability, and trust.