Staff Security Engineer

The role

The Staff Security Engineer will own and lead all security engineering activities, defining the vision and scaling the security program. This role involves building security features, writing code, and establishing secure development lifecycles for AI and core infrastructure.

What you will do

• Own and drive the strategic security roadmap.
• Design and mandate scalable security architectures.
• Define, implement, and govern the Secure Development Lifecycle (SDLC).
• Establish secure SDLC practices for internal AI tools and customer-facing AI features.
• Lead threat modeling and risk assessments for AI and machine learning ecosystems.
• Develop automated remedial workflows and vulnerability management.
• Mentor engineers and advise executive leadership.
• Direct organizational response for critical security incidents.
• Dictate strategy for pentesting and bug bounty programs.

Required qualifications

• Proven track record of owning, building, and scaling application security programs in a SaaS or fast-paced startup environment.
• Deep technical expertise in software engineering (e.g., Python, JavaScript/TypeScript, Rust, C/C++).
• Architectural-level understanding of reliability, safety, and security.
• Deep understanding of security challenges for Artificial Intelligence and Large Language Models (LLMs).
• Practical experience securing internal AI infrastructure and customer-facing AI applications.
• Ability to drive cross-functional consensus and influence engineering leadership.
• Strong business acumen.
• Ability to work in autonomous environments with a distributed team.
• Eligible to work in the U.S. for any employer.

Nice to have

• Located in EST or CST time zone
• Expert-level skills with Python, Django, Postgres, AWS, Terraform, Circle CI/GitLab/GitHub Actions, Semgrep, LLVM
• Prominent voice or active contributor in open-source security projects, standardizations, or industry working groups
• Experience transforming ways security and engineering teams collaborate

Before you apply

• Applicants must be authorized to work in the US.
• Unable to sponsor or take over sponsorship of an employment visa at this time.

About the company

Jellyfish is an intelligence platform for AI-Integrated engineering that helps companies leverage AI to transform how they build software.