Security Tooling Engineer Jobs

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. Join Roblox as an Engineering Manager of Application Security and lead a team responsible for improving the security of our products, services, and development ecosystem. In this role, you will drive security across the software lifecycle, partnering with engineering teams to identify risks, improve secure development practices, and build scalable solutions that protect Roblox at scale. You will balance hands-on security work with longer-term investments in automation, tooling, and developer enablement. You will work closely with engineering, infrastructure, and security teams to reduce risk while enabling teams to move quickly and safely. This role reports to the Senior Manager of Application Security and is based in San Mateo with a hybrid schedule. You Have: 8+ years of experience in Information Security 2+ years of experience managing engineers Strong background in Application Security or Product Security Experience driving security programs across the software development lifecycle Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and secure coding practices Experience working closely with engineering teams in modern environments (cloud, microservices, CI/CD) Prov

About the AI Security Institute The AI Security Institute is the world's largest and best-funded team dedicated to understanding advanced AI risks and translating that knowledge into action. We’re in the heart of the UK government with direct lines to No. 10 (the Prime Minister's office), and we work with frontier developers and governments globally. We’re here because governments are critical for advanced AI going well, and UK AISI is uniquely positioned to mobilise them. With our resources, unique agility and international influence, this is the best place to shape both AI development and government action. About the Team AISI's Chem Bio (CB) team conducts technical research to assess evolving AI capabilities related to science R&D and CB misuse, and the effectiveness of technical safeguards that might mitigate risks arising from those capabilities. The goal of our research is to inform critical decisions on security, opportunities, policy, and risk mitigation made by governments and AI developers. We're a close-knit, unusually interdisciplinary team—made up of machine learning researchers and engineers, software engineers, virologists and bacteriologists, behavioural research scientists, biosecurity experts, long-standing CB policy specialists and talented generalists—who work closely with other technical and policy teams across government. Role Responsibilities We are building a dedicated engineering function within the CB team — a small team that owns the shared platform, tooling, and infrastructure that our research projects depend on. This role is a senior individual contributor within that function. The successful candidate will: Design and build reliable systems — architect and deliver core platform components that enable researchers to run experiments and ship results quickly, including LLM-based agent systems, evaluation frameworks, and supporting infrastructure. Work closely with researchers — translate varied research needs across general agents, sc

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role As a Staff Software Engineer on the team, you will shape Verkada's internal access management architecture, define technical strategy, and build the infrastructure used to provision, review, and audit access across the company. From evolving our in-house access platform to setting guardrails for AI-driven and agentic workflows, your technical leadership will directly impact every team at Verkada. What You'll Do Own the technical architecture of Verkada's internal access management platform, the system of record for employee, service, and non-human access across company resources. Design, build, and operate highly available, observable backend infrastructure for access provisioning and review, using modern backend languages and cloud-native tooling. Extend and harden integrations with identity providers (e.g. Okta) — custom roles, en

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta's Corporate Engineering team is the infrastructure layer that keeps 1,500+ people connected, secure, and moving fast. AI is now central to how that happens, and this role leads the team that owns the backbone underneath it. Corporate Engineering owns the shared AI platform for Vanta's internal systems: identity and access for AI tools, cost visibility and controls, sanctioned tooling and guardrails, and the enablement that helps people use those tools well. We do not own product AI, which stays with Engineering, and we do not replace the AI work happening inside individual departments. We build the engineering layer that makes all of it safer, cheaper, and better supported. The company has moved fast. AI assistant use is widespread across every function, MCP infrastructure is live and self-serve company-wide, internal apps ship on a hosted platform, and AI spend has grown to the point where attribution and guardrails genuinely matter. What does not exist yet is a single owner for that platform layer. That is this role. As Sr. Manager, AI Engineering, you will lead a small, senior team, write the charter for what Corporate Engineering owns versus enables, and build the platform that lets the rest of Vanta adopt AI quickly without accumulating cost, risk, or duplication. What you’ll do as a Senior Manager, AI Corporate Engineering at Vanta: Lead, coach, and grow a senior team spanning platform engineering and technical program management. Set clear direction, hold a high bar, and give the team explicit permission to push back with data. Own the AI access layer end to end: identity and authentication for AI tools, connector

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

The Incident Insights & Readiness SRE team at Datadog fosters a resilient culture by using incidents as learning opportunities and catalysts for growth. Our users are Datadog engineers, and we build the software, tooling, and operational frameworks that help them prepare for, respond to, and learn from incidents. We work closely with engineering teams across Datadog to analyze incidents and turn those insights into better tools, stronger incident response, and organizational learning. Our efforts empower Datadog to navigate unexpected failures confidently, efficiently, and with a commitment to continuous learning and systems improvement. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Own and improve the on-call experience for the company by establishing best practices and building platforms to support on-call rotations and compensation. Define how we respond to incidents, lead the design and implementation of software to streamline the process, and collaborate with product teams to improve incident response across Datadog. Our aim is to fully support our incident responders in dealing with complexity. Contribute to the post-mortem process for the company, collaborating with teams on writing them, and identifying opportunities to reduce friction and enhance learning value for the organization. Our team also runs a weekly postmortem reading group. Support various teams in facilitating incident reviews that emphasize learning and blamelessness. Help them share their learnings across the organization to improve the resilience of our people. Provide technical leadership and day-to-day coaching to team members, accelerating their growth through design reviews, collaborative problem-solving and operational excellence best practices. Tra

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Corporate Systems team runs the core collaboration platforms everyone here works in and builds the tooling and automation behind IT. That responsibility extends to the companies we acquire. Their people, devices, and systems have to come into Anthropic securely. You'll own the IT side of Anthropic's acquisitions: due diligence, integration planning, and integration. Before close, you'll assess a company's IT environment and give the deal team a clear read on risk and effort. You'll define the technical integration plan and its requirements: what moves, where it lands, in what order, what has to be ready on day one, and how each security gap gets closed. After close, you'll carry out that plan and bring the company's people, devices, and systems onto our stack. This is a hands-on engineering role. You'll hold admin, write code, build automation, run the cutovers yourself and bring in other teams when the work calls for their expertise or support. You'll lead this work for IT Engineering and partner with Security, Corporate Development, Legal, People, and Finance at every stage. M&A will be your primary focus and responsibility, but you'll be a full member of the Corporate Systems team; taking part in planning and reviews, using and contributing to the team’s tooling, and contributing to the roadmap. Early on, M&A will be most of your work, including using Claude to automate the repeatable parts of diligence and integration. As that automation matures, and when M&A load is light, you'll contribute to other parts of the team’s roadmap. Responsibilities Lead technical IT due diligence: assess a

We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale—trillions of data points per day—providing always-on alerting, metrics visualization, logs, and application tracing for tens of thousands of companies. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way The Incident Insights & Readiness SRE team at Datadog fosters a resilient culture by using incidents as learning opportunities and catalysts for growth. Our users are Datadog engineers, and we build the software, tooling, and operational frameworks that help them prepare for, respond to, and learn from incidents. We work closely with engineering teams across Datadog to analyze incidents and turn those insights into better tools, stronger incident response, and organizational learning. Our efforts empower Datadog to navigate unexpected failures confidently, efficiently, and with a commitment to continuous learning and systems improvement. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Own and improve the on-call experience for the company by establishing best practices and building platforms to support on-call rotations and compensation. Define how we respond to incidents, lead the design and implementation of software to streamline the process, and collaborate with product teams to improve incident response across Datadog. Our aim is to fully support our incident responders in dealing with complexity. Contribute to the post-mortem process for the company, collaborating with teams on writing them, and identifying opportunities to reduce friction and enhance learning value for the organization. Our team also runs a

Datadog’s Chaos Engineering team builds systems that surface reliability weaknesses before they become outages. As a Senior Software Engineer, you will initially focus on zonal resilience, building automation that helps services safely evacuate and recover from zonal failures, while also contributing to fault injection, incident replay, gameday orchestration, and reliability tooling. You will work across engineering teams to design systems that safely exercise production failure modes and turn findings into verified remediation. You will also help advance the use of AI and automation to identify, test, and close resilience gaps as Datadog’s software and infrastructure evolve. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Build zonal-resilience automation that coordinates safe workload evacuations, switchovers, and recovery in partnership with the teams that own affected services. Design and build fault-injection systems for production environments, including infrastructure- and application-level testing, incident replay, and controlled resilience experiments. Develop safeguards such as blast-radius controls, kill switches, validation mechanisms, and rollback paths that keep production experiments contained and reversible. Build agents and automation that help propose failure scenarios, triage experiment results, and connect reliability findings to tracked remediation and verification. Lead gamedays from hypothesis and scenario design through execution, documented findings, remediation tracking, and validation of completed fixes. Design and implement reliable distributed systems, including gRPC services, Kubernetes controllers, and shared platform components, while contributing to technical design and mentoring other engineers. Who You Are: You have str

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for a Software Engineer, Trust & Safety, to design, build, and operate the large-scale, real-time distributed systems that stop abuse and fraud on the platform, including fraud committed through AI agents, fraud that abuses deployments and compute resources, and payment fraud on token-based usage. You will write the services, detection systems, and large language model (LLM) tooling that disrupt abuse at internet scale. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do: Design and build production services that detect and disrupt fraud committed through AI agents, fraud that abuses deployments and compute resources, and payment fraud on token-based usage Build detection systems that find abuse patterns across large datasets Ship LLM-driven systems for abuse detection, classification, and prevention, and build the datasets and evaluation pipelines that measure them Build and maintain internal tools for trust and safety workflows Analyze threat actor behavior to inform detection logic, and work with security, product, and infrastructure teams to move prototypes into stable production What you need: 5+ years of software engineering experience building large-scale, real-time distributed systems Wrote and shipped production code in JavaScript/TypeScript and Python, owning systems end to end from prototype through deployment and iteration Hands-on LLM experience, including prompt engineering, evaluation, and fine-tuning Operated production services on AW

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We're hiring a Security Risk Specialist, who will help run and shape our risk management program and treatment plans, enabling risk and control owners and security teams to keep risk at an acceptable level as the business grows. You will work cross-functionally to achieve business goals by running risk assessments and reporting, supporting exception requests when a policy can't be met, and helping automate the tooling and processes that keep our risk register accurate and trustworthy. You'll also help us build a more proactive risk function — going into specific areas of the business to deep-dive their controls, surface where things have gone wrong, and get ahead of issues before they surface. You will report into the Senior Security Risk Manager on our GRC team in our Security organization. You’re excited about this opportunity because you will… Lead our global risk management process (assessing risk, negotiating treatment plans with owners, turning regulatory and framework changes into real, working controls) Get into the detail of how controls operate day-to-day, factoring in threat intelligence to make sure we stay ahead of new threat actors and attack vectors Manage policy exceptions by building compensatory controls or a case for risk acceptance instead Own risk reporting for key areas like security or engineering, becoming the go-to risk contact for at least one and helping reduce risk there in a measurable way Collaborate and report widely within our GRC and security teams and across the business Help shape our team’s strategy and tooling as we grow by building your own automations rather than waiting on an engineer to build them for y

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the Role: We are looking for a Machine Learning Engineer on our Trust & Safety Engineering team, to build and operate the production systems that detect and stop abuse on the platform at internet scale. This is an engineering-first role, roughly 80% writing and shipping production code (services, pipelines, and infrastructure) and 20% modeling, taking detection and classification approaches from prototype to hardened systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do: Design, build, and operate production systems that detect and disrupt abusive behavior across the platform, with an emphasis on reliability, scalability, and observability Build and maintain machine learning (ML) infrastructure, including training pipelines, feature pipelines, serving infrastructure, and evaluation frameworks Ship large language model (LLM) and classical ML approaches for abuse detection and classification, turning prototypes into maintainable code Own systems end to end, from integrating a model into the platform through deployment, monitoring, and iteration Work with security, product, and infrastructure teams to turn abuse patterns and detection logic into production systems What you need: 5+ years of software engineering experience building and operating production systems at scale Wrote production code in Python, plus JavaScript/TypeScript or Go Built and maintained ML infrastructure, such as training and serving pipelines, feature stores, or evaluation tooling Integrated LLMs in

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The IT Operations team keeps Anthropic running. We make sure every employee can do their best work without friction. We're hiring an IT Operations Engineer to develop our global asset management and hardware lifecycle program across our offices in San Francisco, New York, Seattle, London, Dublin and Sydney. You will bring program expertise to how we track hardware as inventory through its whole life: procurement and receiving, the inventory of record, assignment, refresh, collection and recovery, e-waste and secure disposal, and reseller relationships, iterating and scaling practices as we mature. The same person runs day-to-day operations for our corporate mobile program in addition to expertise in management of laptop and workstation lifecycle operations. You'll partner with several teams within the IT, Security and business operations organizations: IT Hardware Ops runs procurement, fleet logistics, onboarding and offboarding, the storage room, and physical intake. The Endpoint pod owns MDM, device policy and enrollment. Finance owns the budget and vendor contracts. Hardware requests that come through the IT Support queue land with the IT Support team, and you'll help define how they are handled. Responsibilities Strategy and Tooling Develop the global asset management strategy: the lifecycle model, the data we keep on every device, and how each office executes against it Select, implement and administer the asset management tool, define its data model and integrations, and partner with IT Engineering where the work needs platform-level access Contribute to and develop the processes on-site engineers in each office e

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role As an AV Engineer focused on Platform & Automation, you'll build and own the software layer of Anthropic's collaboration systems — the tools, integrations, and engineering practices that let a small AV team support a fast-growing global office portfolio. Our rooms, event spaces, and broadcast systems are increasingly managed through APIs and code: device management platforms, DSP and control systems, conferencing administration, ticketing, and paging. Your job is to turn that surface into reliable, team-owned tooling, and to bring software engineering discipline to how we build and maintain it. You can expect a lot of your time writing, shipping, and operating code — fleet health monitoring, automated room testing and ticketing, integrations between our AV platforms and IT systems, and the internal tools that AV Engineering, AV Operations, and Events rely on every day. You'll also help own the administration of the software platforms we already run, and set the standards for how the team version-controls, reviews, tests, releases, and maintains everything from DSP designs to firmware to internal services. Responsibilities Design, build, and ship internal tools and integrations that monitor, test, and manage AV and collaboration systems across every office Develop fleet health monitoring and automated room testing that catch failures before users report them and open actionable tickets automatically Build integrations across device and platform APIs — Q-SYS (including plugins and Lua control scripts), Logitech Sync, Google Meet hardware, digital signage; and IT systems such as Jira, Slack, PagerDuty, and Google

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role Build and lead the GRCA function within Verkada’s Security Team. Manage risks, scale and meet Verkada’s growing compliance needs. Curate information provided to customers about Verkada’s security practices. You'll build scalable, automated programs that enable rapid business growth while maintaining customer trust. As Verkada expands globally with increasing enterprise customers, this role is critical to meeting sophisticated security and compliance expectations that directly impact revenue and risk management. What You'll Do Work cross functionally with Security, IT, Engineering, Product and Legal to provide guidance on security controls implementation including: effectiveness, implementation and automation Research, build and maintain tooling for testing and continuous monitoring of security controls across multiple platforms incl