Software Engineer, Security

Cursor; California (MO); On-site; USD 120,000 - 170,000; Full time

Job summary

Cursor is seeking Security Software Engineers to ship secure products end-to-end across enterprise security, cloud, and protections embedded in our editor and platform.

You will build tools and features to safeguard our customers, with a focus on secure defaults, rapid iteration, and end-to-end ownership in a small, high-talent team.

Sample projects include AI-augmented code review, least-privilege cloud access, and a safe environment for agents to engage with code.

Qualifications

• Strong software engineer with security as a focus.
• Experience building or scaling secure systems in fast-moving environments.
• Ability to think like builder and attacker to anticipate vulnerabilities.
• Comfort with owning problems end to end and iterating with limited guidance.

Skills

Security engineering

Threat modeling

Secure coding

DevSecOps

Job description

Our mission is to automate coding. The first step in our journey is to build the best tool for professional programmers, using a combination of inventive research, design, and engineering. Our organization is very flat, and our team is small and talent dense. We particularly like people who are truth-seeking, passionate, and creative. We enjoy spirited debate, crazy ideas, and shipping code.

About the Role

Security Software Engineers help us ship secure products end-to-end covering enterprise security, cloud/infrastructure, and protections embedded directly in our products. You'll build the tools and features that safeguard our platform and editor and protect our customers.

You may be a fit if

• You are a strong software engineer first, with security as your superpower.
• You think like both a builder and an attacker: you anticipate vulnerabilities before they become issues.
• You care about developer experience, building solutions that are secure and frictionless.
• You're comfortable moving quickly, owning problems end to end, and iterating with limited guidance.
• You have experience building or scaling secure systems in fast-moving environments.
• You have strong opinions on secure defaults, but can balance pragmatism with rigor.
• You enjoy working on small, high-talent teams where impact is magnified.
• You're motivated by protecting developers and users, and you see security as an enabler.

Sample projects include

• Build AI augmented code review to get involved in important systems at the right time
• Build a least-privilege and JIT system for cloud access that enables engineers and enforces least privileges.
• Implement a safe environment for agents to engage with code
• Implement a framework for securely handling agent manipulation of user systems (e.g., MCP tool calls and command execution).
• Implement a paved road for preventing inappropriate data from being logged