Platform Security Engineer: Threat Modeling & Isolation

Zof AI; San Francisco, Northern (CA, KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Zof AI in San Francisco is seeking an Application Security Engineer to own the security posture of a platform that reads, executes, and modifies customer code. The role focuses on isolating agent workloads, secrets handling, supply chain security, and enterprise controls that buyers audit before trusting a repository.

Responsibilities include hardening sandbox and tenant isolation, designing access controls, securing the software supply chain, and enabling SOC 2 compliance.

Qualifications

• Experience securing production software systems or cloud infrastructure.
• Strong software engineering foundation and comfort shipping code.
• Working knowledge of application security and common vulnerability classes.
• Experience with cloud security, identity, and access control.
• Familiarity with SOC 2 controls and audit readiness.
• Clear written and verbal communication.

Responsibilities

• Own the security posture of a platform that reads, executes, and modifies customer source code.
• Harden the sandbox, tenant, and workload isolation boundaries agents run inside.
• Design secrets management and least privilege access across the platform.
• Secure the software supply chain from dependencies through build and deploy.
• Build the technical controls behind SOC 2 and enterprise security requirements.
• Teach agent fleets to find, prove, and remediate real vulnerabilities in customer code.
• Run threat modeling, design reviews, and incident response as part of regular practice.
• Partner with engineering and sales to clear enterprise security reviews and questionnaires.

Skills

Threat modeling

Application security

Cloud security

Secure coding

Security reviews

Communication

Education

Bachelor's in CS/SE

Security certs (CISSP, etc.)

Tools

Static analysis

Fuzzing tools

Job description

Zof AI in San Francisco is seeking an Application Security Engineer to own the security posture of a platform that reads, executes, and modifies customer code. The role focuses on isolating agent workloads, secrets handling, supply chain security, and enterprise controls that buyers audit before trusting a repository.

Responsibilities include hardening sandbox and tenant isolation, designing access controls, securing the software supply chain, and enabling SOC 2 compliance.