Senior Infrastructure Security Engineer

Dropbox; United States; On-site; USD 190,000 - 290,000; Full time

Benefits offered by this job

Health insurance

Job summary

Dropbox is seeking a Security Engineer to protect its AI and agentic infrastructures across on-prem and cloud environments. You will design, implement and operate security controls, authentication, and networking patterns for non-human workloads, ensuring robust defense against AI-specific risks.

Lead cross-functional security initiatives, review infrastructure stack for hardening, and help scale Dropbox security across products and data stores, while navigating on-call rotations and security

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiency.
• Experience securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI supply-chain risk.
• Experience designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider equivalents.
• Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
• Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
• Proficiency using scripting or high-level languages such as Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, Java.

Responsibilities

• Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and data stores.
• Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors
• Lead security implementation for secure usage of AI tools and governance.
• Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
• Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms and recommendations.
• Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructure.
• Collaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security posture.

Job description

Role Description

At Dropbox, we believe in simplifying the way people work together. We provide a range of innovative cloud-based solutions to empower individuals and businesses to share, access, and collaborate on their files seamlessly. Security plays a pivotal role in shaping our mission of building a more enlightened way of working where everyone can unleash their creative potential without constraints.

As a Security Engineer, you'll safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration. Join us in owning a range of security projects, fostering innovation and growth in a collaborative environment.

Our Engineering Career Framework is viewable by anyone outside the company and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.

Responsibilities

• Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and data stores.
• Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors
• Lead security implementation for secure usage of AI tools and governance.
• Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
• Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms and recommendations.
• Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructure.
• Collaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security posture.

Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.

Requirements

• 9+ years of Security experience or related industry experience, demonstrating impactful contributions to security strategies.
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiency.
• Experience securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI supply-chain risk.
• Experience designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider equivalents.
• Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
• Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
• Proficiency using one or more scripting or high-level languages to automate tasks, manipulate data, or build small systems e.g. Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, Java.

Preferred Qualifications

• Experience securing MCP-based systems or similar AI agent and tool protocols.
• Experience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakers.
• Familiarity with NIST AI RMF, NIST SP 800-218A, OWASP LLM and agentic security guidance.
• Experience in Kubernetes and container security.
• Experience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM or SOAR.
• Certifications such as CISSP, CISM, or equivalent.
• Involvement in security community activities, conferences, or publications.

Compensation

US Zone 1

This role is not available in Zone 1

US Zone 2

$214,200 — $289,800 USD

US Zone 3

$190,400 — $257,600 USD