Security Software Engineer (0→1) for AI Security

reflectionai; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Top-tier compensation

Stock options

Health & wellness

Meals provided

Parental leave

Unlimited PTO

Visa sponsorship

Team off-sites

Job summary

Reflection.AI is seeking a Member of Technical Staff - Security Software Engineer to build our Application Security function from the ground up. You will architect solutions with high ownership in a low-structure environment and drive them through technical and organizational challenges.

This role offers autonomy to shape security across our AI stack, including incident detection, supply chain security, and secure software development lifecycle practices.

Qualifications

• Strong proficiency with Python or Golang.
• Experience architecting and building complex software systems.
• Familiarity with common application logic exploit vectors.
• Experience implementing and rolling out cross-functional projects that impact many teams.
• AI-native engineering workflow.
• Experience working with Kubernetes.
• Experience working with AWS and/or GCP.
• Interest in growing in multiple security sub-specialties within security, including infrastructure security, incident detection & response, and digital forensics.
• Willingness to flex into cross-functional projects across multiple pillars of Security as needed.
• Experience building programs from 0 to 1.

Responsibilities

• Contribute engineering cycles to a broad array of key projects across the Security organization ranging from our agentic AI incident detection & response SOC to long-running internal AI agents.
• Implement security controls around AI agents, including sandboxes, identity, and authorization systems.
• Define software supply chain security strategy, tooling, and infrastructure including SCA/SBOM analysis.
• Roll out controls to rapidly ingest and act on emerging supply chain attacks.
• Develop and maintain a comprehensive threat model of our software stack.
• Drive our pentesting program with prioritization guided by your threat model.
• Define and socialize foundation secure coding practices and architecture patterns relevant to AI/ML systems.
• Integrate SAST tools into CI/CD pipelines for continuous vulnerability analysis.
• Define and implement a comprehensive Secure Software Development Lifecycle

Skills

Python

Golang

System design

Kubernetes

AWS/GCP

Security mindset

CI/CD

Threat modeling

0 to 1 development

Tools

CI/CD pipelines

SCA/SBOM tooling

Job description

Reflection.AI is seeking a Member of Technical Staff - Security Software Engineer to build our Application Security function from the ground up. You will architect solutions with high ownership in a low-structure environment and drive them through technical and organizational challenges.

This role offers autonomy to shape security across our AI stack, including incident detection, supply chain security, and secure software development lifecycle practices.