Security Tooling Engineer Jobs

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations. We are looking for engineers who enjoy solving security problems across multiple domains rather than specializing exclusively in a single area. You will join a highly technical Security Engineering team that values innovation, ownership, and building scalable security solutions. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale. What You’ll Do Security Engineering Design, build, and maintain security platforms, services, APIs, automation, and internal tooling. Develop solutions that streamline Cloud vulnerability management, Network Security, Detection engineering, Incident response, access governance, and security operations. Use software engineering principles to build detections-as-code, security workflows, internal platforms, and scalable security services that enable the organization to move faster while remaining secure. Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead. AI & LLM Security Design and implement security controls for AI applications, LLM-powered services, agents, and AI development workflows. Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interacti

Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and teams across Europe and the US. As AI continues to shape the way we live and work, Synthesia develops products to enhance visual communication and enterprise skill development, helping people work better and stay at the center of successful organizations. Following our recent Series E funding round, where we raised $200 million, our valuation stands at $4 billion. Our total funding exceeds $530 million from premier investors including Accel, NVentures (Nvidia's VC arm), Kleiner Perkins, GV, and Evantic Capital, alongside the founders and operators of Stripe, Datadog, Miro, and Webflow. Location: Europe remote or London hybrid About the role: As our engineering and research organisation grows, so does the complexity of securing it. Our Application Security team is at the forefront of that challenge — building AI-native security tooling, embedding security into the development lifecycle at scale, and finding ways to make a small, highly capable team punch well above its weight. We're looking for an Engineering Manager to lead and grow the AppSec team. This is not a coordination role. You'll be leading a team of exceptionally senior and staff-level engineers who are deeply self-directed and technically excellent. To earn their trust and enable their best work, you'll need to be genuinely close to the craft — able to engage at depth on threat modelling, agentic security tooling, SDLC design, and application risk. You'll also own AppSec strategy and be accountable for how the function scales alongside a product organisation that is growing fast and leaning heavily into AI-assisted development. Important note: Anyone working as a manager within the Infosec team will need to follow the Infosec Team Management Tenets . Key Responsibilities: Lead, support, enable and grow the AppSec team — owning hirin

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Operations Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Harden our cloud-native environments (AWS, OCI, GCP) by introducing secure by default designs and features into network, tooling, and processes Own and drive resolutions for enabling engineers to design, build, and use infrastructure securely at scale by deploying secure architectures using infrastructure-as-code and reusable code libraries Manage IAM / RBAC for cloud infrastructure, and partner with IT on streamling authentication/authorization to ensure unified access control across the board Deploy and operationalize some of the security services and tools (eg: SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling) Respond to security incidents and harden environments post-incidents. Support control monitoring and remediation for compliance initiatives Gather and analyze security metrics to address security issues with cross-team dependencies Be a problem solver who is empathetic to developer concerns and will employ construc

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure product development, and embedding security into the fabric of how we operate. We partner closely with Engineering, Product, IT, Legal, and Compliance to build and maintain trust at scale. We are seeking an Engineering Manager, Security to lead and grow our Security Engineering organization as Asana continues to grow globally. This role is pivotal in translating high-level security strategy into technical reality, ensuring our infrastructure is resilient by design and our internal security tooling is world-class. This is a leadership role with accountability for people management, technical mentorship, and the delivery of high-impact security initiatives across a complex, high-growth SaaS environment. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve Lead and mentor a multi-disciplinary engineering team, fostering a culture of technical excellence, psychological safety, and high accountability. Own the security engineering roadmap, ensuring high-quality delivery and measurable risk reduction through effective prioritization. Drive recruiting efforts to attract top-tier talent and establish clear, ambitious career paths for your team. Champion a high-performance environment where security rigor acts as a catalyst for innovation rather than a bottleneck to velocity. Collaborate with Product and Engineering teams to embed security requirements directly into system des

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're seeking an exceptional engineer to join Anthropic's Detection Platform team to build and scale our next-generation security analytics infrastructure. In this role, you'll architect and implement data pipelines that process massive amounts of security telemetry, develop ML-powered detection systems, and create innovative solutions that leverage Claude to transform security operations. Responsibilities: Build AI-powered platform responsible for all aspects of D&R capabilities from detection development to incident response Design and implement scalable data pipelines for ingesting and processing security telemetry across our rapidly growing infrastructure Architect solutions for storing and efficiently querying large volumes of security-relevant data Create rapid prototypes and proof-of-concepts for new security tooling and analytics capabilities Work closely with security and infrastructure teams to understand requirements and deliver solutions Mentor engineers and contribute to hiring and growth of the Security team Participate in on-call shifts You may be a good fit if you: 7+ years of experience in software engineering with a focus on security, infrastructure and/or data pipelines Track record of building and maintaining internal developer tools or security platforms Strong understanding of data processing pipelines and experience working with large-scale logging systems Experience with: Test-driven software development and/or CI/CD (plus for direct experience with Detection-as-code workflows) Infrastructure-as-code (Terraform, CloudFormation) Query optimization for large datasets Experience with building st

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Austin, TX What You'll Do Cloudflare is seeking a Security Engineer to design and build agentic security tooling for Cloudflare Security, and to release that work as open-source reference implementations, interactive labs, and technical workshops for customers and partners. This role sits in the Applied Research & Labs function within the Office of the CSO. You will work embedded with Cloudflare's security teams, build on Cloudf

As an AI Security Engineer , you will work at the intersection of software engineering, cybersecurity, and artificial intelligence. You will design and build security tools, assess AI-powered applications for vulnerabilities, evaluate third-party and open-source AI technologies, and help establish secure development standards for AI systems. This is a hands-on engineering role for someone who enjoys building solutions, solving complex technical problems, and exploring emerging security risks across technologies such as Generative AI, RAG, and agentic systems. What You'll Do Design, build, and implement tools for AI security testing, penetration testing, red teaming, and continuous vulnerability assessment. Develop mock and test AI applications to evaluate internal and third-party AI security solutions. Identify and assess security risks within AI-enabled applications and workflows. Develop security requirements, standards, and best practices for securely building and deploying AI applications. Evaluate third-party vendors, open-source tools, libraries, and AI technologies from a security perspective. Integrate security testing and evaluation capabilities into CI/CD pipelines and development workflows. Build scalable security tooling and automation that can be adopted across different teams and environments. Troubleshoot applications and solve complex engineering and security problems. Partner with engineering teams, security professionals, customers, vendors, and business stakeholders to understand requirements and deliver practical solutions. Create clear technical documentation covering tools, features, security assessments, testing methodologies, and findings. What You'll Bring 5+ years of software development experience building and supporting production applications. Strong hands-on programming experience with Python. Experience working with RESTful APIs and structured data formats such as JSON, XML, CSV, and HTML. Experience with CI/CD pipelines and mod

Who We Are Nuro is a self-driving technology company on a mission to make autonomy accessible to all. Founded in 2016, Nuro is building the world’s most scalable driver, combining cutting-edge AI with automotive-grade hardware. Nuro licenses its core technology, the Nuro Driver™, to support a wide range of applications, from robotaxis and commercial fleets to personally owned vehicles. With technology proven over years of self-driving deployments, Nuro gives the automakers and mobility platforms a clear path to AVs at commercial scale, empowering a safer, richer, and more connected future. About the Role As an Infrastructure Security Engineer, you will increase the security of Nuro’s core infrastructure used to develop and operate our autonomous delivery service. You will need to leverage your technical skills to create cross-functional strategic outcomes for Nuro. You will need to use good engineering judgment when evaluating and fixing both real and theoretical vulnerabilities. You work closely with development teams and can build systems. Your work contributes directly to the safety and security of the people in the communities we operate in. You’re a collaborative thinker with an ownership mindset, and thrive in fast-paced and collaborative environments. As a member of Nuro’s Security team, you will work on projects that impact all areas of security, from offensive testing to detection and response. About the Work Assess and secure Nuro and protect user data. Evaluate and verify engineering teams' vulnerability remediations (PR review or other evaluations) Design and build security tooling and infrastructure for use Nuro’s engineers Design and implement core security infrastructure like authentication and authorization systems, pipelines and automation for security incident detection and response, PKI, and others About You Expert in one or more core domains: Securely using a public cloud, securing corporate networks and endpoints, or application secu

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack. The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams. Key responsibilities Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly Review incident response metrics and procedures, and drive improvements Work across security and engineering teams Take part in an on-call rotation Minimum qualifications Experience handling security incidents and investigating anomalies as part of a team Working knowledge of EDR, SIEM, SOAR, or similar security tooling A solid understanding of cloud environments and operations Experience working with engineering teams in a SaaS environment Proficiency with a scripting language such as Python and query languages such as SQL Strong communication and collaboration skills Able to lead projects with little guidance Able to pick up new languages and technologies quickly Preferred qualifications 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience Security operations or inves

At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value. THE WORK: As a Senior Security Engineer on the Security Operations team, you will help Ripple detect, investigate, and respond to security threats across our environment. You'll work across detection and data engineering, incident response, and security automation — building the tooling and detection logic that lets the team scale. You'll operate independently on sophisticated investigations and detection initiatives, and you'll be a technical reference point for less senior engineers on the team. WHAT YOU’LL DO: Design, build, and tune detections across our security stack (Google Security Operations) to improve our ability to identify and mitigate threats. Lead incident response for sophisticated and high-severity investigations, from initial triage through root cause and remediation. Build and maintain security automation workflows (e.g., in Tines) that reduce manual toil in detection, triage, and response. Own and improve SIEM/data pipeline health, including log source coverage, parsing/normalization, and alert quality. Develop cross-functional relationships (IT, engineering, other Ripple teams) to influence security initiatives and drive adoption of security tooling. Maintain awareness of the evolving threat landscape and translate that awareness into concrete improvements to our detection coverage and response playbooks. Use AI tools as more than a chatbot

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. The Role As the Security Engineering Manager, you will lead our Security Engineering team in a hands-on technical leadership role focused on securing the company’s cloud-native environment and development pipeline. You will manage a team of security engineers responsible for cloud infrastructure security, application security, CI/CD pipeline hardening, DSPM, and SaaS security posture management. Your primary objective is to harden our security posture, build and maintain preventative controls, and translate security strategy into a technically sound engineering roadmap. Key Responsibilities Technical Execution & Architecture: Remain hands-on in configuring cloud security tooling, reviewing architecture, and validating engineering decisions. Serve as the technical escalation point for complex challenges across the team’s domain. Cloud & Application Security Program Ownership: Own the security engineering program and drive continuous improvement in the security of the company’s development lifecycle and cloud environment. Team Leadership: Lead and develop a team of security engineers, managing their performance and growth while fostering a culture of technical excellence and ownership. Project Management & Execution: Define, manage, and execute security engineering projects from conception to completion, ens

Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and teams across Europe and the US. As AI continues to shape the way we live and work, Synthesia develops products to enhance visual communication and enterprise skill development, helping people work better and stay at the center of successful organizations. Following our recent Series E funding round, where we raised $200 million, our valuation stands at $4 billion. Our total funding exceeds $530 million from premier investors including Accel, NVentures (Nvidia's VC arm), Kleiner Perkins, GV, and Evantic Capital, alongside the founders and operators of Stripe, Datadog, Miro, and Webflow. Location: Remote (US East Coast/Central) As our team and customer base grow, we need to make sure our security efforts scale accordingly. For that, we are looking to expand the Synthesia Infosec team by onboarding an additional Security Engineer (L6)! You will report to the Head of Security and work within the Security Operations team. Key Responsibilities: Build and own deeply technical security improvements across our Cloud Infrastructure(s) and associated territory (AWS/GCP, Kubernetes, CI/CD), including shipping production changes yourself when needed. Design, implement, and iterate on detection and response capabilities (SIEM, EDR/MDR, cloud-native detections, CNAPP) with an engineer’s bias for automation, reliability, and measurable outcomes. Hunt, investigate, and respond to security alerts and suspicious activity end-to-end (triage → containment → eradication → recovery → learnings), including writing tooling and detection logic to prevent recurrence. Build internal security tooling and automations (IaC, scripts, integrations) that reduce toil and raise the security bar by default. Experience & Qualifications: You’re a deeply technical security engineer with a builder/hacker mindset, able to go from

At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value. THE WORK: As a Senior Staff Security Engineer focused on AI Security, you will be Ripple's deepest technical expert at the intersection of artificial intelligence and security. This is a purpose-built, high-impact individual contributor role that spans two critical mandates: securing AI systems that Ripple builds and operates, and harnessing AI to make Ripple's security function faster, smarter, and more scalable. You will lead the technical strategy for AI security across the agentic SDLC, define and operationalize guardrails for LLM and agentic AI adoption, and build AI-powered security tooling in close partnership with the broader organization to embed AI security into how Ripple operates every day. You will also shape Ripple's external posture on AI security, contributing to industry standards, regulatory discussions, and Ripple's published security practices. WHAT YOU’LL DO: Drive the AI Security technical strategy and roadmap, defining how Ripple secures its AI systems, governs agentic workflows, and embeds security controls into the AI development lifecycle from day one. Design and implement security controls for LLM-integrated and agentic AI systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment of autonomous agent actions that exceed authorized scope. Own AI security across the Controlled Agentic SDLC, establ

At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value. THE WORK: As a Senior Staff Security Engineer focused on AI Security, you will be Ripple's deepest technical expert at the intersection of artificial intelligence and security. This is a purpose-built, high-impact individual contributor role that spans two critical mandates: securing AI systems that Ripple builds and operates, and harnessing AI to make Ripple's security function faster, smarter, and more scalable. You will lead the technical strategy for AI security across the agentic SDLC, define and operationalize guardrails for LLM and agentic AI adoption, and build AI-powered security tooling in close partnership with the broader organization to embed AI security into how Ripple operates every day. You will also shape Ripple's external posture on AI security, contributing to industry standards, regulatory discussions, and Ripple's published security practices. WHAT YOU’LL DO: Drive the AI Security technical strategy and roadmap, defining how Ripple secures its AI systems, governs agentic workflows, and embeds security controls into the AI development lifecycle from day one. Design and implement security controls for LLM-integrated and agentic AI systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment of autonomous agent actions that exceed authorized scope. Own AI security across the Controlled Agentic SDLC, establ

Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company. We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. Join us in redefining the future of wellbeing! THE OPPORTUNITY We are hiring a Senior Security Engineer| AppSec to our Information Security team in Brazil ! This is a Remote – Brazil position, meaning you can work from anywhere within the country. Please note that this role is only open to candidates in Brazil. The Information Security team is responsible for protecting our global subscription platform serving millions of users. As a Senior Security Engineer, you will drive software security across our product verticals — starting with application security (secure SDLC, SAST/DAST, secure design reviews) and expanding into adjacent domains like detection engineering, IAM, and vulnerability management. This is a unique opportunity to help build a security engineering program from the ground up in a high-growth environment. You will own a control domain end-to-end in a role that is deliberately generalist — we are looking for someone who reasons deeply about root causes and partners closely with engineering teams to embed security seamlessly into product delivery. YOUR IMPACT Own core application security services, security tooling (e.g., SAST/DAST, IAM, vulnerability manage