Secure-by-Design Software Engineer for AI Products

Thinking Machines Lab Inc.; San Francisco (CA); On-site; USD 300,000 - 350,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Unlimited PTO

Parental leave

Relocation support

Job summary

Thinking Machines Lab Inc. seeks a security-focused software engineer to embed security by default across product development. You’ll partner with product and research teams to bake security into design, build tooling, and ensure safety at scale.

You will secure web apps and APIs, implement authentication/authorization, and improve observability for security events. This role requires collaboration across stacks and teams and a bias for action in a fast-moving AI environment in San Francisco.

Qualifications

• Bachelor’s degree in CS or equivalent experience.
• Proficiency in Python or Rust.
• Strong software engineering fundamentals with security focus.
• Experience securing web apps and APIs (auth flows, access control, secrets management).
• Familiarity with common vulnerability classes and prevention frameworks.
• Comfort with cloud infrastructure and end-to-end ownership.

Responsibilities

• Partner with product and research teams to embed security into development lifecycle.
• Design security controls across product stack (auth, session mgmt, input validation).
• Build security tooling and automation for CI/CD and dependency management.
• Mitigate AI-specific risks like model abuse, prompt injection, data leakage.
• Improve observability and detection for security-relevant events in production.

Skills

Python

Rust

Security review

Auth flows

Cloud infra

Cross-functional

Threat modeling

Secure defaults

Education

Bachelor's degree in Computer Science

Job description

Thinking Machines Lab Inc. seeks a security-focused software engineer to embed security by default across product development. You’ll partner with product and research teams to bake security into design, build tooling, and ensure safety at scale.

You will secure web apps and APIs, implement authentication/authorization, and improve observability for security events. This role requires collaboration across stacks and teams and a bias for action in a fast-moving AI environment in San Francisco.