Ai Security Engineer Jobs

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Staff Site Reliability Engineer to join a team focused on designing and developing Security solutions to harden our cloud infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security solutions that help run large-scale, critical infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards and enforce the principle of least privilege to help take our Security posture to the next level. Our Infrastructure Security team has a niche skill-set that balances Security domain expertise with the ability to design, implement, rollout infrastructure across multiple cloud environments without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product. This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the Engineering org to build technical leverage and influence the security roadmap. You will focus on engineering security aspects of the systems used across our services. Join us and be part of a company that is about to change the cloud computing landscape forever. As a Staff Engineer, you should be able

P-1137 Summary At Databricks, we are obsessed with enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best data and AI infrastructure platform, so our customers can focus on the high-value challenges that are central to their missions. Founded in 2013 by the original creators of Apache Spark, Databricks has grown from a tiny corner office in Berkeley, CA to a global organization with over 1500 employees. Thousands of organizations, from small to Fortune 100, trust Databricks with their mission-critical workloads, making us one of the fastest-growing SaaS companies in the world. Our engineering teams build highly technical products that fulfill real, important needs in the world. We constantly push the boundaries of data and AI technology, while simultaneously operating with the resilience, security, and scale that is critical to making customers successful on our platform. Customers trust Databricks with their most valuable data and Trust & Safety has the mission to build the most trusted data analytics and ML platform in the world. Security Engineering is an integral part of Trust & Safety and has a critical role to play in keeping customer data from bad actors. We are looking for senior leaders such as yourselves to create the vision and define the strategy for this space. The impact you will have: Make Databricks safer for our customers by identifying and plugging key gaps in our infrastructure and services Attract top talent from across the industry. Represent the security engineering discipline throughout the organization, having a powerful voice to make us more data-driven Represent Databricks at academic and industry conferences & events What we look for: 5+ years of experience in Data Security or related areas and expertise in two or more of the following--Cryptography, Kubernetes Security, Web Security, Governance,

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the role As an embedded security engineer on the Device Security Team, you’ll work with an amazing team of security, firmware, and backend engineers entrusted with the mission of protecting our fleet of physical security products from threats. You’ll help define the security & privacy roadmap for Verkada’s devices, build tooling and software to measure & improve security posture, and partner closely with product teams to bake secure-by-design principles into our products. What You'll Do Develop & drive security requirements for the hardware and firmware that goes onto the devices we ship to our customers to improve the security of Verkada’s products and exceed customer expectations. Build security tooling to ensure secure development best practices. Perform red team/offensive assessments against firmware &

Job Requisition ID # 26WD100819 Position Overview Our team of security experts helps Autodesk design, build, deploy, and maintain secure products. We embed security throughout the product development lifecycle, from inception, design, development, and testing to cloud operations and our response to existing and emerging threats. Our goal is to stay ahead of evolving security threats by combining deep expertise, technology, and automation to protect Autodesk products and the environments in which they operate. We maintain a strong focus on protecting customer data and investments by strengthening our applications, underlying services, and networks. As part of this team, you will help Autodesk build and deliver Artificial Intelligence (AI)-powered products securely. You will partner with Product and Platform teams to threat model new features and systems, with a particular focus on applications that use Large Language Models (LLMs), AI agents, and AI-assisted workflows. You will also develop code and automation to scale security practices, using modern AI-assisted development tools as part of your daily workflow. This is an opportunity to develop your product security expertise at the forefront of AI while helping Autodesk stay ahead of emerging security threats. Responsibilities Conduct and facilitate threat modeling sessions with Engineering teams to identify assets, trust boundaries, attack paths, security risks, and appropriate mitigations for new and evolving product capabilities Threat model AI and Large Language Model (LLM)-powered systems, including agentic workflows, Retrieval-Augmented Gene

MongoDB's Global Security Organization (GSO) is looking for a Principal Security Engineer. The GSO secures MongoDB's products, infrastructure, and the trust our customers place in us — spanning product security, corporate security, and risk, and working across engineering, go-to-market, and corporate development to keep security moving at the same speed as the business. The Principal Security Engineer will serve as a senior technical anchor for the team. This is a deep individual-contributor role that will stay hands-on with hard security and architecture problems, form sharp independent opinions, and know how to debate, align, and commit once GSO has made a call. Key topic areas will include collaborating with our product teams to ensure identity and permission models meet customer needs for our new autonomous agent platform and working with integration security teams to push the envelope on automated detection, reproduction, and remediation of security vulnerabilities via AI. What we need here is depth, judgment, and the ability to build up the bench of senior technical talent around you. This role can be based out of our NYC or Seattle office or remotely in the North America region. Responsibilities Maintain real technical depth in security and in MongoDB's product architecture — compute, network, and storage — deep enough to evaluate actual risk rather than apply generic best practice Form independent, well-reasoned opinions on security and architecture decisions, and voice them even when they cut against consensus or a leader's default plan Push teams to move faster when process or over-engineering is introducing complexity without reducing risk — and push teams to slow down when GTM pressure is outrunning a clear-eyed view of the risk Debate hard, then align, then commit: help the org land on the right call, then execute on it Seed and grow a working community of senior ICs embedded in security operations, product security, and enterprise sec

ROLE SUMMARY Our Global Cyber Defense team is responsible for safeguarding Pfizer’s digital assets and infrastructure through proactive threat detection, response, and risk mitigation across on-premises, cloud, and hybrid environments. The Manager, Email Security Engineering is responsible for leading and advancing enterprise-wide protections across email, collaboration, and messaging platforms—critical threat surfaces within the Cyber Defense organization. Email remains a primary vector for phishing, business email compromise, malware delivery, and account takeover in the pharmaceutical industry. This role will lead the design, implementation, and continuous improvement of email security capabilities across our global enterprise. The role is critical to protecting research, clinical, manufacturing, and corporate environments by delivering resilient, scalable, and compliant controls that prevent, detect, and respond to email-borne threats. ROLE RESPONSIBILITIES Lead Email Security Engineering initiatives across enterprise email, collaboration, and messaging platforms, including secure email gateways, cloud email security, anti-phishing, anti-malware, and domain protection capabilities. Define and execute the email security strategy and roadmap in alignment with the evolving threat landscape, business priorities, and regulatory requirements. Own the engineering and lifecycle management of email security technologies, including deployment, configuration, policy tuning, automation, integration, performance, and continuous optimization. Strengthen defenses against phishing, business email compromise, malicious attachments and links, spoofing, impersonation, and account takeover through layered preventive and detectiv

The Security Incident Response Team (SIRT) plays a vital role in keeping Datadog safe from cybersecurity threats, defending the organization against threat actors, and maintaining the trust of our customers by ensuring their data remains protected. In this role, you will work closely with teams across Datadog to identify, triage, and respond to a wide range of threats, ensuring that we can contain any incidents as quickly as possible. You will also contribute to the tools and systems that make us more effective in our mission, and help ensure we have cross-functional learning from incidents to improve our defensive posture going forward. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Partner with our Cyber Threat Intelligence and Detection Engineering teams to identify threats to Datadog and ensure we have appropriate, accurate, high-signal detections for those threats. Triage escalated alerts to determine whether a security incident is occurring or may occur imminently. Respond to security incidents, whether as an incident commander or as an incident responder Make us more efficient through building tools and automations that eliminate repetitive processes Help us improve our overall security posture through post-incident reviews, tabletop and purple team exercises, and process/runbook improvements. Participate in a light on-call rotation. Who You Are: You have at least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or other operational security domains. You’ve worked with at least one public cloud platform (AWS, GCP, or Azure) and cloud-native technologies like Kubernetes, Docker, or Terraform. You have a strong understanding of cloud-native threat actor TTPs and corresponding defensive contr

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries. The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real. What You'll Do Endpoint & SaaS security Own and mature our endpoint security stack (EDR) across macOS and Windows fleets , writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in. Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risk

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a hands-on Infrastructure Security Engineer to build and secure SpaceXSI's infrastructure from the bare-metal layer up through the platform and application stack. In this role, you will design, implement, and harden physical and private-cloud foundations—servers, networks, identity, and orchestration—and carry that security posture into containers, automation, and hybrid connectivity with public cloud. This role focuses on securing critical infrastructure spanning data centers, colo, and hybrid environments, with work that may span platforms such as SpaceXSI, X Social, X Money, and related systems. You’ll operate with an automation-first mindset: building secure foundations at the metal and OS layer, hardening platforms at scale, and partnering closely with engineering so security is embedded in how we build and run systems—not bolted on after the fact. RESPONSIBILITIES: Bare metal, data center & network security Design and implement secure bare-metal and private-cloud architectures (servers, storage, out-of-band management, BIOS/UEFI/BMC firmware posture) Harden physical and virtual fleets: OS baselines (Linux/Windows), CIS benchmarks, patch a

RDQ227R1180 While candidates in the listed location(s) are encouraged for this role, candidates in other locations (US based) will be considered. The Incident Response team's mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a fast, efficient and standardised manner. We're a tight-knit team of security incident responders and incident handlers doing "Security for Databricks on Databricks", using our own platform to create near-real-time log analytics, alerting and forensics. You will be an individual contributor on the security Incident Response (IR) team at Databricks, reporting to the regional IR manager. You will be responsible for conducting security analysis and forensics, responding to high-priority alerts and contributing to automations and agentic capabilities. You will be a security multiplier and help the team scale security incident response at Databricks. The impact you will have: You will respond to incidents as part of a distributed 24x7 operations and on-call schedule. You will triage and respond to security events and alerts, ensuring quick and effective containment. You will conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events. You will provide technical leadership and influence team direction. You will develop solutions, including leveraging AI and agentic platforms, to deliver autonomous capabilities, expedite your work and scale the impact of the team. You will communicate technical decisions through design docs and tech talks, and mentor junior security responders via security guidance, design reviews and code reviews. What we look for: Must have an active or current US GOV Secret clearance eligibility; Top Secret preferred. Bachelor's Degree AND 7+ years experience in Incident Response work OR Master's Degree AND 5+ years experience. Cloud security expertise in at least 1 of AWS, GCP or Azure, a

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a talented and motivated Infrastructure Security Engineer to join our security team. In this role, you will design, implement, and maintain secure cloud and hybrid infrastructure, and ensure the integrity of our cloud-native applications. This role focuses on securing critical infrastructure across multi-cloud and hybrid environments, with work that may span platforms such as X, X Social, X Money and related systems. You’ll operate with an automation-first mindset: building secure foundations, hardening platforms at scale, and partnering closely with engineering teams so security is embedded in how we build and run systems—not bolted on after the fact. RESPONSIBILITIES: Cloud & Infrastructure Security Design and implement secure container standards and automation that enable frictionless developer workflows Maintain Kubernetes security aligned with current best practices Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines Secure and enhance CI/CD pipelines; integrate and maintain code scanning platforms Detection, Operations & Tooling Monitor and respond to security events and incidents i

About Pinterest: Millions of people around the world come to our platform to find creative ideas, dream about new possibilities and plan for memories that will last a lifetime. At Pinterest, we’re on a mission to bring everyone the inspiration to create a life they love, and that starts with the people behind the product. Discover a career where you ignite innovation for millions, transform passion into growth opportunities, celebrate each other’s unique experiences and embrace the flexibility to do your best work. Creating a career you love? It’s Possible. At Pinterest, AI isn't just a feature, it's a powerful partner that augments our creativity and amplifies our impact, and we’re looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities, we’ll explore your foundational skills and how you collaborate with AI. Through our interview process, what matters most is that you can always explain your approach, showing us not just what you know, but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here . Pinterest is seeking an experienced Security Engineer to build and implement detection and response improvements and adapt to emerging threats to protect employees and infrastructure. In this role you will have the opportunity to solve challenging problems and provide a meaningful impact on our overall security posture. We are looking for a candidate with a passion for both security and innovation. What you'll do: Build alerts and automation workflows to improve capabilities to detect and response to external and internal security threats Manage our logging pipelines and infrastructure and onboard new logging sources to improve our detection coverage Develop and maintain internal tooling to expand and automate team detection and response capabilities Respond to alerts generated from our tooling and run incidents as part of an on-call rotation Co

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Application Security Engineer) to own the security of the software Hark ships. You'll review design and code, find and fix vulnerabilities in our backend services, mobile apps, and third-party integrations, and build the guardrails that let engineers move fast without shipping bugs. Our agents act on behalf of users across their apps and data, so you'll also be defining how to secure LLM and agent systems, a space with very few established playbooks. This role is hands-on; you'll be reading code, writing fixes, and building tooling, not managing or auditing. Responsibilities Threat-model new features and services, with a focus on agent/LLM attack surfaces (prompt injection, tool misuse, data exfiltration, cross-tenant access). Review code and designs for Hark's backend services (primarily Go), APIs, and mobile apps; fix vulnerabilities directly when it's faster than filing a ticket. Secure authentication, authorization, and session handling across our consumer product, including OAuth integrations with third-party platforms. Build and tune SAST, dependency, and secrets scanning in CI so findings are high-signal and developers actually act on them. Triage and remediate findings from pentests and our

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Information Security Engineer) to secure the infrastructure and systems Hark runs on. You'll harden our AWS environments, own identity and access across the company, build detection and response, and lead incident response when things go wrong. We run model training, agent sandboxes, and hardware manufacturing pipelines, so the environment is broader and more interesting than a typical SaaS stack. This role is hands-on; you'll be building and operating, not managing or auditing. Responsibilities Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations. Own identity and access: SSO, least-privilege IAM, just-in-time access, secrets management, and access reviews. Build and maintain detection and alerting pipelines; lead triage, containment, and post-incident review. Secure the corporate environment: endpoint management, SaaS security posture, and zero-trust network access. Evaluate third-party vendors and integrations for security and privacy risk. Build the technical controls and evidence behind our compliance programs (SOC 2, GDPR) as automation, not spreadsheets. Requirements 4–8 years of hands-on security engineer