Security Engineer

The role

You will lead application security across SaaS and AI products as part of the infrastructure team. You will establish product security practices, influence architecture, and build tooling to manage vulnerabilities.

What you will do

• Lead threat modeling, secure design reviews, and vulnerability management.
• Integrate and automate controls for secrets, access, and dependency security.
• Establish and maintain code, dependency, secrets, and dynamic application security testing.
• Partner with third-party penetration testers and manage external vulnerability reporting.
• Develop secure design and coding training for engineers.
• Establish processes for routing security issues and following through on fixes.
• Respond to security incidents involving application vulnerabilities.
• Partner on security assurance and customer security conversations.
• Set a foundation for the security function and roadmap.
• Turn recurring customer needs into product and engineering decisions.

Required qualifications

• 3+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation.
• Experience writing and reviewing production code.
• Active use of AI tools for security investigation, testing, or remediation.

Nice to have

• Background with large-scale, multi-tenant SaaS applications handling sensitive customer data
• Experience securing AI/ML applications, including prompt injection, unauthorized tool use, and adversarial input protections
• Familiarity with our tech stack (TypeScript, React, Go, Python, PostgreSQL, Redis, Snowflake, AWS, Kubernetes, Karpenter, Claude, GPT, Gemini Flash, and open-source models)
• Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS)
• Experience as a first or early security hire, or building security practices without a large team or established playbook

About the company

Assembled helps companies scale customer support through tools for managing complexity, including AI agents and scheduling software. More than 400 companies trust Assembled.