10+ years in security engineering, application security, or infrastructure engineering with a strong security focus at a Staff level.
Strong software engineering skills with experience in production code (Python, TypeScript, or similar).
Deep experience securing AWS or another major cloud, including IAM, KMS, and infrastructure as code.
Hands-on application security experience, including threat modeling and secure code review.
Depth in security fundamentals applicable across various tools and vendors.
Experience in vulnerability management and incident response in production environments.
Comfortable engaging directly with enterprise customers on security matters.
Good judgment about risk, with the ability to explain trade-offs clearly.
Responsibilities
Own Rox's security program and roadmap, setting standards for secure engineering as the company scales.
Run and tune security tooling across CI, runtime, and testing, ensuring findings are triaged and resolved.
Review designs and code for new features, establishing guardrails for secure engineering practices.
Secure tenant isolation and manage authentication and authorization across APIs.
Harden cloud infrastructure, focusing on IAM, encryption, and logging.
Secure the software supply chain and respond swiftly to vulnerabilities.
Design security architecture for enterprise deployment models, including customer-managed keys.
Benefits
Competitive pay with considerable equity upside
100% company-paid medical, dental, and vision plans for employees and eligible dependents
Company-paid life & AD&D insurance, plus short- and long-term disability
401(k) with automatic enrollment
Unlimited PTO, paid sick leave, company holidays, and bereavement leave
Up to 20 weeks of paid parental leave at 100% pay
Wellness stipend of $375 per quarter
Learning stipend of up to $2,000 per year
Internet & cell phone stipend of $25 per month
Mental health support and virtual care services
Fertility and family-building support, plus backup care membership
Pre-tax commuter benefits for transit and parking
Daily catered breakfast & lunch at the SF HQ, along with meal allowances and rideshare support.
Full Job Description
Your Role
Rox agents read and act on our customers' most sensitive revenue data. Security is a core part of how we win and keep enterprise trust.
As a Staff Security Engineer, you will own security end to end across product and application security, cloud and infrastructure security, and the security side of enterprise customer work. You will be one of our strongest engineers: someone who hunts down engineering anti-patterns, fixes them in code, and explains the "so what" of security risk to engineers, executives, and customers.
You will report to the VP of Engineering for starters, and work closely with Platform, Foundations, Forward Deployed Engineering, and our GTM team on enterprise deals. Responsibilities
Own Rox's security program and roadmap, and set the bar for secure engineering as we scale.
Run and tune security tooling across CI, runtime, and testing. Triage findings and drive fixes to closure.
Review designs and code for new features, agent capabilities, integrations, and public APIs. Build guardrails and paved roads so engineers ship securely by default.
Secure tenant isolation, AuthN, AuthZ, and RBAC across our agent runtime and customer-facing APIs.
Harden our cloud footprint: IAM, secrets, network segmentation, encryption at rest and in transit, logging, and detection.
Secure our software supply chain, and respond fast to newly disclosed vulnerabilities and compromised packages.
Design the security architecture for enterprise deployment models, including customer-managed keys, security log export, single tenant, and deployments in customer clouds.
Be the security voice with customers: lead security reviews and join calls with enterprise security teams.
Partner with Compliance on audits, questionnaires, and trust materials. Security and compliance are different jobs, and you bring the security depth.
Build and run incident response: playbooks, postmortems, and customer communication.
Take part in an on-call rotation for security incidents. Security is 24/7, and we want to be upfront about that.
Monitor the threat landscape and turn industry incidents into concrete actions for Rox.
Qualifications
10+ years in security engineering, application security, or infrastructure engineering with a strong security focus, including time operating at Staff level scope.
Strong software engineering skills. You read and write production code (Python, TypeScript, or similar) and ship fixes yourself.
Deep experience securing AWS or another major cloud: IAM, KMS, networking, containers, and infrastructure as code.
Hands-on application security experience: threat modeling, secure code review, OWASP Top 10, AuthN and AuthZ, and multi-tenant data isolation.
Depth in security and systems fundamentals that carries across any tool or vendor.
Experience running vulnerability management, detection, and incident response in production.
Comfort working directly with enterprise customers on security reviews and architecture discussions.
Good judgment about risk. You know when to block and when to unblock, and you explain tradeoffs clearly.
Be located in or willing to relocate to San Francisco. This role is onsite at our SF HQ.
Nice to haves
Supported a SOC 2 Type II, ISO 27001, or similar audit alongside a compliance team.
Built customer-managed key systems, security log integrations, or single tenant deployment models.
Experience securing LLM and agent systems: prompt injection, tool and data access controls, and secure handling of customer data in AI pipelines.
Offensive security or penetration testing background.
Benefits
Competitive pay with considerable equity upside
Medical, dental, and vision, including 100% company-paid plans for you and eligible dependents
Company-paid life & AD&D, plus short- and long-term disability
401(k) with automatic enrollment
Unlimited PTO, plus paid sick leave, company holidays, and bereavement
Up to 20 weeks of paid parental leave at 100% pay (birth, adoption, or foster)
Wellness stipend: $375/quarter
Learning stipend: up to $2,000/year
Internet & cell phone stipend: $25/month
Mental health support, virtual care, and care navigation
Fertility & family-building support, plus backup care membership
Pre-tax commuter benefits (transit & parking)
SF HQ: daily catered breakfast & lunch, meal allowances, and rideshare support when commuting to the office
Apply
To apply, please fill out the application form. We're looking forward to connecting with you!
