Lead Security Engineer — AI Platform & Tooling

ThoughtSpot; Phoenix, Northern (AZ, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

ThoughtSpot is seeking a Security Engineer to join the AI Platform Security team. This high-ownership, low-oversight role will own security outcomes for a portfolio of products and define how security reviews and standards operate across the organization.

You will build tooling and programs to scale security coverage, lead vulnerability management and the bug bounty program, and drive shift-left practices across the SDLC while shaping the AI/LLM security program for the team.

Qualifications

• Experience in security engineering, application security, offensive security, or a closely related technical discipline.
• Track record owning a security program area independently and driving cross-functional remediation without formal authority.
• Excellent written communication for standards, risk narratives, and executive reporting.

Responsibilities

• Own end-to-end security for an assigned portfolio of products: design reviews, threat modeling, risk acceptance, and driving high-severity findings to closure.
• Set technical direction for program areas: define the review bar, standards, checklists, and intake processes other engineers follow.
• Lead vulnerability management and the bug bounty program: complex triage, escalation, researcher relations, SLA ownership, and program evolution.
• Design and build security automation and internal tooling that removes manual toil and scales coverage beyond headcount.
• Drive shift-left adoption across the SDLC through pipeline gates, guardrails, paved-path patterns, and developer enablement.
• Lead the team's AI/LLM security practice: assessment methodology, testing approach, and applied frameworks for agentic and model-backed features.
• Communicate risk and program health to engineering and executive leadership through metrics, reporting, and clear written narratives.

Skills

Security engineering

Application security

Offensive security

Threat modeling

Written communication

Ambiguity tolerance

Leadership/mentorship

Tools

Snyk

Burp Suite

DAST/ SAST

Job description

ThoughtSpot is seeking a Security Engineer to join the AI Platform Security team. This high-ownership, low-oversight role will own security outcomes for a portfolio of products and define how security reviews and standards operate across the organization.

You will build tooling and programs to scale security coverage, lead vulnerability management and the bug bounty program, and drive shift-left practices across the SDLC while shaping the AI/LLM security program for the team.