Security Engineer - On-Site SaaS, SF

Town; San Francisco (CA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

You will work on securing the data pipeline, encryption, tenant isolation, and secrets management while hardening cloud infrastructure and OAuth integrations with Google, Slack, and CRM. This in-person role is based in San Francisco's Financial District, five days a week.

Qualifications

• Extensive experience in security engineering, with depth in app and/or infra security.
• Able to read and write production code; fixes problems, not just raises issues.
• Experience securing multi-tenant SaaS handling sensitive data at scale.

Responsibilities

• Own application and product security across Town assistant and agent surface.
• Threat-model autonomous agent behavior, including input risks and data handling.
• Secure the data pipeline: encryption, tenant isolation, access controls, secrets management.
• Harden cloud infrastructure and OAuth integrations (Google, Slack, CRM).
• Build the secure development lifecycle: design reviews, code reviews for security, dependency hygiene.
• Stand up and run incident response: detection, triage, postmortems.
• Partner with engineering to make the secure path the easy path.

Skills

Security engineering depth

Production code reading

Multi-tenant SaaS security

Cloud security (AWS/GCP)

Threat modeling

Secure SDLC

Incident response

Job description

You will work on securing the data pipeline, encryption, tenant isolation, and secrets management while hardening cloud infrastructure and OAuth integrations with Google, Slack, and CRM. This in-person role is based in San Francisco's Financial District, five days a week.