Product Security Engineer - AI Platform & Enterprise Security

Zof AI; San Francisco, Northern (CA, KY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Zof AI is seeking a Product Security Engineer to own the security posture of a platform that reads, executes, and modifies customer source code. This role focuses on isolating agent workloads and tenants, secrets handling, supply chain security, and enterprise controls that buyers audit before trusting us with a repository.

You will work in a mid to senior capacity on-site in San Francisco, collaborating with engineering and sales to clear enterprise security reviews and questionnaires as part

Qualifications

• Experience securing production software systems or cloud infrastructure.
• Strong software engineering foundation and ability to ship code.
• Working knowledge of application security and vulnerability classes.
• Experience with cloud security, identity and access control.
• Familiarity with SOC 2 compliance.

Responsibilities

• Own the security posture of a platform that reads, executes, and modifies customer source code.
• Harden sandbox, tenant, and workload isolation boundaries for agents.
• Design secrets management and least-privilege access across the platform.
• Secure the software supply chain from dependencies through build and deploy.
• Build technical controls behind SOC 2 and enterprise security requirements.
• Teach agent fleets to find, prove, and remediate real vulnerabilities in customer code.
• Run threat modeling, design reviews, and incident response as a regular practice.
• Partner with engineering and sales to clear enterprise security reviews and questionnaires.

Skills

Threat modeling

Ship code

Security ownership

Clear communication

Job description

Zof AI is seeking a Product Security Engineer to own the security posture of a platform that reads, executes, and modifies customer source code. This role focuses on isolating agent workloads and tenants, secrets handling, supply chain security, and enterprise controls that buyers audit before trusting us with a repository.

You will work in a mid to senior capacity on-site in San Francisco, collaborating with engineering and sales to clear enterprise security reviews and questionnaires as part