Senior Security Infra Engineer: Secure-by-Default Frameworks

Asana; San Francisco (CA); Hybrid; USD 202,000 - 230,000; Full time

Benefits offered by this job

Mental health, wellness & fitness

Career coaching & support

Inclusive family building benefits

Long-term savings or retirement plans

In-office culinary options

Job summary

Asana is seeking a Senior Software Engineer for its Security Development team in San Francisco. You will build durable, secure-by-default platforms and guardrails that empower engineering teams to move fast while reducing systemic risk.

The role emphasizes preventative security controls across infrastructure and product layers. The ideal candidate has 4+ years of full-time software development experience, with a background in platforms or core infrastructure, and a strong interest in security

Qualifications

• 4+ years of full-time software development experience with large codebases.
• Experience building platforms, libraries, or core infrastructure.
• Strong interest or direct experience in security engineering and preventative controls.

Responsibilities

• Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate vulnerabilities.
• Engineer and improve core security services, including access control, secrets management, and AWS permissions systems.
• Develop and own the vulnerability remediation platform to help engineering teams address risks quickly.
• Partner with product and infrastructure teams to implement foundational security controls across cloud networking and compute infrastructure.
• Advise product teams on securing projects throughout design, development, launch, and incidents.

Skills

Security engineering

Platform/core infrastructure

AWS/cloud

Communication

Proactive risk management

AI curiosity

Tools

AWS

Job description

Asana is seeking a Senior Software Engineer for its Security Development team in San Francisco. You will build durable, secure-by-default platforms and guardrails that empower engineering teams to move fast while reducing systemic risk.

The role emphasizes preventative security controls across infrastructure and product layers. The ideal candidate has 4+ years of full-time software development experience, with a background in platforms or core infrastructure, and a strong interest in security