Software Engineer, Security

Pylon Labs; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Commuter benefits

Parental leave

Unlimited PTO

Annual offsite

Lunch and snacks

Fitness stipend

Job summary

Pylon is seeking a security-focused engineer to own application and product security across shipped work and future plans, including threat modeling, secure design reviews, and code review on auth and access control.

You will build tooling for scale: supply chain security, vulnerability management, secure-by-default libraries, and AI-assisted security workflows, and work hands-on with engineers to ship fixes securely.

Qualifications

• 3+ years building production software with security at the center.
• Willing to work on-site in SF or relocate.
• Strong experience with auth, sessions, APIs, secrets handling.
• Familiar with vulnerability triage, bug bounty, or incident response.
• Ability to translate risk into concrete engineering work.
• Comfortable leveraging AI for development.
• Startup experience in ambiguous environments.
• Growth mindset and openness to feedback.
• (Bonus) Experience with React, Golang, GraphQL, AWS.
• (Bonus) Experience building agentic products.

Responsibilities

• Own application and product security across shipped and upcoming work.
• Build tooling for security scalability: supply chain security, vulnerability management, secure-by-default libraries.
• Run the vulnerability lifecycle end to end and mature bug bounty / disclosure programs.
• Develop AI-assisted security workflows and safe coding agents.
• Collaborate with engineers to ship fixes and enforce secure-by-default practices.
• Take projects from customer request through design to ship.
• Assist with incident response: triage, investigation, and fixes.
• Grow infrastructure work as the company scales.

Skills

Security-focused development

Infra/backend engineering

Application security fundamentals

Vulnerability triage/response

AI-assisted development

Startup experience

Growth mindset

In-person SF relocation

React/Golang stack

Agentic products experience

Job description

Pylon — the agentic support platform purpose-built for B2B.

Pylon is the only agentic support platform, purpose-built for B2B companies. For leaders scaling AI-native support teams, Pylon lets humans and agents collaborate on customer work – investigating, resolving, and acting on every signal across every channel that matters.

Unlike platforms built before the AI era, Pylon enriches every interaction with deep account-level context, automates the low impact customer work, and surfaces answers before your team even has to ask. The result: faster responses, happier customers, and a system that continuously improves itself.

We're backed by a16z, BCV, General Catalyst, and Y Combinator. More than 1,500 companies including Linear, Cognition (makers of Devin), Modal Labs, and Incident.io run their support and customer success workflows on Pylon. We're also featured on the Enterprise Tech 30 List.

What you'll do

• Own application and product security across what we've shipped and what's still to come, including threat modeling, secure design reviews, and code review on the areas that matter most like auth and access control.

• Build tooling that scales security past one person: supply chain security, vulnerability management, secure-by-default libraries, and developer-friendly guardrails.

• Run the vulnerability lifecycle end to end (triage, validation, prioritization, remediation) and help mature our bug bounty and disclosure programs.

• Build AI-assisted security workflows, like agents that scan code, propose fixes, and surface real risk, along with the controls that let the rest of the team use coding agents safely.

• Work hands-on with engineers to ship fixes and help them build securely by default, telling the difference between theoretical risk and risk that actually matters so we spend effort where it counts.

• Take projects from customer request through design to ship, and own them the whole way through.

• Help with incident response: triage, investigate, and coordinate the fix.

• Flex into broader infrastructure work as we grow, including the same scaling, reliability, and developer-velocity problems the infra team owns.

What We're Looking For

• You have 3+ years building production software with security at the center of it, or you're a strong infra/backend engineer looking to make security your focus.

• You like to build, not just advise. You're comfortable turning risk into actual engineering work and shipping it.

• You know application security fundamentals well: auth, sessions, APIs, secrets handling, and the common vulnerability classes and how to design them out.

• You've done some mix of vulnerability triage, bug bounty, disclosure, or incident response, and can balance urgency against pragmatism.

• You highly leverage AI for software development and can juggle multiple workstreams at the same time.

• You’ve worked at startups previously and navigated ambiguous environments.

• You have a growth mindset, want to constantly improve, and want to receive feedback.

• You're in SF or you're willing to relocate, you love working in-person, and you're serious about joining us to build a culture we'll all love

• (Bonus) You have experience with our tech stack (React, Golang, GraphQL, and AWS).

• (Bonus) You have experience with building agentic products in production.

Our Perks

• Commuter benefits
• Parental leave
• 14 company holidays + unlimited PTO
• Annual offsite
• Lunch, dinner, and snacks at the office
• Fitness stipend

More about Pylon

Funding: Series B led by a16z and BCV ($51M total raised)

Founders: Advith Chelikani, Robert Eng, and Marty Kausas

Team: Currently 100+ and growing!

Additional Job details

The base salary range for this position is $180k - $280k annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Pylon. This role is eligible for stock options, as well as a comprehensive benefits package.