Staff Security Engineer

The role

You will own the security program and roadmap across product, application, cloud, and infrastructure security. You will hunt engineering anti-patterns, fix them in code, and manage security for enterprise customer work.

What you will do

• Own Rox’s security program and roadmap
• Run and tune security tooling across CI, runtime, and testing
• Review designs and code for new features, agent capabilities, integrations, and public APIs
• Secure tenant isolation, AuthN, AuthZ, and RBAC
• Harden cloud footprint including IAM, secrets, network segmentation, encryption, logging, and detection
• Secure software supply chain and respond to vulnerabilities
• Design security architecture for enterprise deployment models
• Lead security reviews and join calls with enterprise security teams
• Partner with Compliance on audits, questionnaires, and trust materials
• Build and run incident response including playbooks, postmortems, and customer communication

Required qualifications

• 10+ years in security engineering, application security, or infrastructure engineering with a strong security focus, including time operating at Staff level scope
• Strong software engineering skills
• Read and write production code (Python, TypeScript, or similar) and ship fixes yourself
• Deep experience securing AWS or another major cloud: IAM, KMS, networking, containers, and infrastructure as code
• Hands-on application security experience: threat modeling, secure code review, OWASP Top 10, AuthN and AuthZ, and multi-tenant data isolation
• Depth in security and systems fundamentals
• Experience running vulnerability management, detection, and incident response in production
• Comfort working directly with enterprise customers on security reviews and architecture discussions
• Good judgment about risk
• Be located in or willing to relocate to San Francisco

Nice to have

• Supported a SOC 2 Type II, ISO 27001, or similar audit alongside a compliance team
• Built customer-managed key systems, security log integrations, or single tenant deployment models
• Experience securing LLM and agent systems: prompt injection, tool and data access controls, and secure handling of customer data in AI pipelines
• Offensive security or penetration testing background

Benefits

• Competitive pay with considerable equity upside
• Medical, dental, and vision, including 100% company-paid plans for you and eligible dependents
• Company-paid life & AD&D, plus short- and long-term disability
• 401(k) with automatic enrollment
• Unlimited PTO, plus paid sick leave, company holidays, and bereavement
• Up to 20 weeks of paid parental leave at 100% pay (birth, adoption, or foster)
• Wellness stipend: $375/quarter
• Learning stipend: up to $2,000/year
• Internet & cell phone stipend: $25/month
• Mental health support, virtual care, and care navigation
• Fertility & family-building support, plus backup care membership
• Pre-tax commuter benefits (transit & parking)

About the company

Rox builds a revenue operating system using autonomous revenue agents to manage the end-to-end customer lifecycle. The platform powers Global 2000 leaders in banking, hardware, construction, and sovereign AI.