Rox
Staff Security Engineer
San Francisco · Staff · Full-time · Posted Oct 27, 2026
- Experience
- 10+ years; includes time operating at Staff level scope.
About the job
Owns Rox’s security program across product, applications, cloud infrastructure, and enterprise deployments, helping protect sensitive customer revenue data and build enterprise trust.
What you'll do
- Set the security roadmap; run security tooling and drive findings and vulnerabilities to resolution.
- Review designs and code, build secure engineering guardrails, and harden cloud infrastructure, APIs, agent runtime, and software supply chain.
- Lead incident response and enterprise security reviews; partner with Compliance on audits and trust materials.
What they ask for
- 10+ years in security engineering, application security, or infrastructure engineering with a strong security focus, including time operating at Staff level scope.
- Strong software engineering skills; read and write production code (Python, TypeScript, or similar) and ship fixes.
- Deep experience securing AWS or another major cloud, including IAM, KMS, networking, containers, and infrastructure as code.
- Hands-on application security experience, including threat modeling, secure code review, OWASP Top 10, AuthN and AuthZ, and multi-tenant data isolation.
Nice to have
- Supported a SOC 2 Type II, ISO 27001, or similar audit alongside a compliance team.
- Experience securing LLM and agent systems, or offensive security or penetration testing.
Tools
Python, TypeScript, AWS, KMS, OWASP Top 10
AI focus
Security for LLM and agent systems, including prompt injection, tool and data access controls, and secure handling of customer data in AI pipelines (nice to have).
Model-written summary · the original posting is authoritative