Staff Security Engineer — Enterprise Security Lead (SF Onsite)

Rox

San Francisco (CA)

On-site

USD 210,000 - 270,000

Full time

7 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Competitive pay with considerableequiv

Medical, dental, and vision, including

401(k) with automatic enrollment

Unlimited PTO, paid holidays and sick

Parental leave up to 20 weeks

Wellness stipend

Learning stipend

Internet & cell stipend

Mental health support

Fertility & family-building support

Pre-tax commuter benefits

SF HQ: catered breakfast & lunch

Job summary

Rox is seeking a Staff Security Engineer in San Francisco to own end-to-end security across product, cloud, and enterprise customer work. You will hunt anti-patterns, fix issues in code, and explain risk to engineers and executives. You will partner across platform teams and GTM to secure enterprise deals.

You will report to the VP of Engineering and participate in an on-call rotation, with a strong focus on secure design and customer trust.

Qualifications

10+ years in security engineering, application security, or infrastructure engineering with senior scope.
Strong software engineering skills; you read and write production code (Python, TypeScript) and ship fixes.
Deep experience securing AWS or another major cloud (IAM, KMS, networking, containers).
Hands-on application security: threat modeling, secure code review, OWASP Top 10, multi-tenant data isolation.
Security depth across tools and vendors; broad systems fundamentals.
Experience running vulnerability management, detection, and incident response in production.
Comfort working with enterprise customers on security reviews and architecture discussions.
Ability to explain risk tradeoffs clearly; be judgmental about risk.

Responsibilities

Own Rox’s security program and roadmap; set security standards as we scale.
Run and tune security tooling across CI, runtime, and testing; triage findings.
Review designs and code for new features; build guardrails for secure shipping by default.
Secure tenant isolation, AuthN/AuthZ, and RBAC across runtime and public APIs.
Harden cloud footprint: IAM, secrets, network segmentation, encryption, logging.
Secure our software supply chain and respond to vulnerabilities and package issues.
Design security architecture for enterprise deployment, including customer clouds.
Lead security reviews with customers; participate in enterprise security calls.
Collaborate with Compliance on audits and trust materials.
Build and run incident response; create playbooks and postmortems.
Participate in on-call rotations; security is 24/7.
Monitor threat landscape and translate incidents into action for Rox.