Security Engineer — Own Security for AI SaaS (SF)

Town.com; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Town is seeking a dedicated Security Engineer to own end-to-end security for its AI coworker platform. You will secure the product and agent, harden the infrastructure and data pipeline, and establish threat modeling, secure SDLC, and incident response practices to move fast without compromising trust.

You will collaborate with engineering to make the secure path the easy path and defend a multi-tenant SaaS product handling sensitive user data at scale.

Qualifications

• Extensive experience in security engineering with depth in application and/or infrastructure security.
• Ability to read and fix production code in addition to securing systems.
• Experience securing multi-tenant SaaS handling sensitive data at scale.

Responsibilities

• Own application and product security across the Town assistant and the agent surface.
• Threat-model autonomous agent behavior and guardrails for untrusted input, data exposure, and external actions.
• Secure the data pipeline behind Town's model, including encryption, isolation, access controls, and secrets management.
• Harden cloud infrastructure and third-party OAuth integrations (Google, Slack, CRM).
• Build and scale the secure development lifecycle with design/code reviews, dependency hygiene, and tooling.
• Stand up and run incident response, including detection, triage, and postmortems.
• Partner with engineering to make the secure path the easy path.

Skills

Security engineering

Application security

Infrastructure security

Cloud security

Threat modeling

Incident response

Secure SDLC

OAuth/IAM security

Tools

AWS

GCP

OAuth

Job description

Town is seeking a dedicated Security Engineer to own end-to-end security for its AI coworker platform. You will secure the product and agent, harden the infrastructure and data pipeline, and establish threat modeling, secure SDLC, and incident response practices to move fast without compromising trust.

You will collaborate with engineering to make the secure path the easy path and defend a multi-tenant SaaS product handling sensitive user data at scale.