Member of Technical Staff, Application Security

The role

You will build security into an AI-native product by designing protections for data, ensuring multi-tenant isolation, and threat-modeling AI-native attack surfaces. You will also build a security engineering platform and perform design and code reviews.

What you will do

• Design protections for voice, face, and device-linked profiles including encryption and access boundaries.
• Ensure multi-tenant isolation between staff, customer admins, and study participants.
• Threat-model prompt injection, data exfiltration, and tool/agent permissions.
• Build authentication, authorization, and API surfaces for programmatic and agentic callers.
• Build a security engineering platform with secure-by-default libraries and CI/CD scanning.
• Review architecture and pull requests.
• Write code fixes for vulnerabilities.

Required qualifications

• Junior-level or better development skills.
• Comfortable in a modern backend stack using TypeScript and Terraform.
• Ability to read and write production code.
• Understanding of OWASP Top 10.
• Knowledge of authentication and authorization (OAuth/OIDC, sessions, RBAC).
• Knowledge of cloud and infrastructure security basics.
• Knowledge of secrets management.
• Knowledge of secure API design.
• Knowledge of common vulnerability classes across web and backend systems.
• Ability to communicate complex ideas in writing.

Nice to have

• Prior LLM security experience

Benefits

• Resources to support balance

About the company

Listen was acquired by Salesforce in 2026 and is being incubated within Salesforce AI Labs. The platform runs AI-moderated video interviews at massive scale.