Senior AI Security Platform Engineer

Luma AI; San Francisco (CA); On-site; USD 210,000 - 320,000; Full time

Job summary

Luma AI seeks a senior, hands-on security leader to build the security foundations that support our next growth stage. You will design and ship platform security systems, identity, access control, secrets management, and encryption for a fast-moving AI company.

You will partner with infrastructure, research, and product teams to make secure patterns the default, implement RBAC/ABAC, and establish auditability and incident response while preserving development velocity.

Qualifications

• Must have designed and operated security foundations in production environments.
• Strong ability to write code, review infrastructure, and ship secure systems.
• Experience with RBAC/ABAC, identity, and access management at scale.
• Ability to model threats and define constrained, observable trust boundaries.

Responsibilities

• Design and mature access grant and governance for production systems.
• Implement scalable RBAC/ABAC across infrastructure and products.
• Build robust secrets management and credential lifecycles.
• Establish encryption and key management patterns.
• Define authority scope, revocation, and auditability for agents and systems.
• Create forensic visibility for user and system actions.
• Lead threat modeling across infra, product, and research.
• Partner with engineering to automate secure patterns.
• Prepare readiness for enterprise security reviews.
• Enhance incident detection and response while keeping velocity.

Skills

Security architecture

Production security

RBAC/ABAC design

Code proficiency

Threat modeling

Identity management

Collaboration

Security automation

Job description

Luma AI seeks a senior, hands-on security leader to build the security foundations that support our next growth stage. You will design and ship platform security systems, identity, access control, secrets management, and encryption for a fast-moving AI company.

You will partner with infrastructure, research, and product teams to make secure patterns the default, implement RBAC/ABAC, and establish auditability and incident response while preserving development velocity.