Platform Security Engineer – AI-Driven Security

Retool, Inc.; San Francisco (CA); Hybrid; USD 232,000 - 318,000; Full time

Job summary

Retool, Inc. is seeking an Application Security Engineer who blends deep security fundamentals with hands-on engineering. You’ll work in TypeScript and Python, building security tooling and automating checks to shift left in a fast-paced product platform.

You’ll collaborate with engineering to secure code, perform threat modeling, and drive durable security solutions at scale, including AI-assisted security initiatives and bug bounty programs.

Qualifications

• 5+ years in application security and security engineering.
• Ability to work independently in a fast-moving environment.
• Communicate security concepts clearly to engineers.
• Track record shipping security tooling that benefits multiple teams.

Responsibilities

• Identify systemic security gaps and design durable solutions with engineers.
• Build tooling, automation, and code-level controls for vulnerabilities.
• Conduct in-depth code reviews and security design reviews.
• Drive threat modeling and translate requirements into guidance.
• Contribute to AI-assisted security approaches as code production scales.
• Triage and drive remediation with product engineering and security programs.

Skills

Security engineering

Shipping tooling

TypeScript

Python

Threat modeling

Code reviews

Tools

SAST pipelines

Static analysis rules

Job description

Retool, Inc. is seeking an Application Security Engineer who blends deep security fundamentals with hands-on engineering. You’ll work in TypeScript and Python, building security tooling and automating checks to shift left in a fast-paced product platform.

You’ll collaborate with engineering to secure code, perform threat modeling, and drive durable security solutions at scale, including AI-assisted security initiatives and bug bounty programs.