Security Engineer II - Design Review / Threat Modelling

What you'll do

• Review designs and threat-model services, applications, APIs, infrastructure, mobile platforms, and AI systems; provide corrective security guidance.
• Adversarially test third-party AI agents and perform hands-on penetration testing to identify vulnerabilities and attack paths.
• Build AI-powered security assessment automation and partner with teams to improve security controls and reduce recurring weaknesses.

What they ask for

• 3+ years of professional experience in security engineering, systems architecture, or a related software engineering field.
• Ability to analyze complex system designs and provide technical input on security challenges with multiple dependencies.
• Knowledge of threat modeling, vulnerability classification, and risk modeling frameworks.
• Experience with security designs for cloud-native services, microservices, or distributed systems; bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.

Nice to have

• Hands-on security design review and threat-modeling experience across complex applications, infrastructure, cloud, and mobile platforms.
• Experience with backend languages, multi-cloud environments, AI/LLM security automation, or automated CI/CD and Secure Software Development Lifecycle processes.

Pay

USD $171,000 per year - USD $190,000 per year (base salary; Seattle, WA); USD $171,000 per year - USD $190,000 per year (base salary; Sunnyvale, CA)

Tools

Go, Java, Python, AWS, GCP, SQL, NoSQL, CI/CD

AI focus

Assess third-party AI agents through adversarial testing and build AI-powered automation for security reviews, threat modeling, and penetration testing.