Security Tooling Engineer Jobs

Staff Software Engineer - Testing & Automation Exceptional software engineering is challenging. Amplifying it to ensure that multiple teams can concurrently create and manage a vast, intricate product escalates the complexity. As a Staff Engineer within the Verification Platform team at Sumo Logic, you will drive the implementation and optimization for our verification platform as well as the modernization of our CI/CD pipelines. Your mission is to develop and sustain automated tooling for all testing, verification, and functional requirements, leveraging AI reasoning and machine learning models to predict and prevent delivery issues, while integrating advanced security validation and non-functional requirements into our delivery lifecycle. You will contribute significantly to establishing automated delivery pipelines, empowering autonomous teams to create independently deployable services, and progressing Sumo Logic’s internal Platform-as-a-Service. This role sits at the intersection of Platform Engineering, Quality Engineering, DevSecOps, and Developer Productivity, helping teams deliver secure, reliable, and independently deployable services at scale. Responsibilities Strategy & Leadership: Drive technical direction and design for a modern Quality Engineering platform, driving the adoption of AI reasoning for enhanced automation of all testing, verification, and functional requirements. Pipeline Modernization: Lead the modernization of CI/CD pipelines to include automated security validation, compliance checks, and other critical non-functional requirements, with a focus on integrating AI/ML for intelligent pipeline optimization and risk prediction. Framework Ownership: Own the delivery pipeline and release automation framework for all Sumo services, ensuring improvements in developer productivity, deployment frequency, and release reliability. Cross-Team Collaboration: Educate and collaborate with teams during design and development phases to ensur

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. GitLab features must ship successfully across four distinct deployment platforms—Self-Managed, Dedicated, Dedicated for Government, and GitLab.com. Today, developers routinely discover platform compatibility issues late in development, triggering costly rework, delays, and emergency escalations. The Platform Readiness team is building an internal developer tooling capability that embeds platform readiness intelligence directly into GitLab's software development lifecycle to solve this problem. As a Senior Backend Engineer on the newly established Platform Readiness team, you'll architect and evolve the systems that enable feature

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. GitLab features must ship successfully across four distinct deployment platforms—Self-Managed, Dedicated, Dedicated for Government, and GitLab.com. Today, developers routinely discover platform compatibility issues late in development, triggering costly rework, delays, and emergency escalations. The Platform Readiness team is building an internal developer tooling capability that embeds platform readiness intelligence directly into GitLab's software development lifecycle to solve this problem. As an Intermediate Backend Engineer on the newly established Platform Readiness functional team in Developer Experience, you'll contribute

About the Team The Early Access Program (EAP) team leads high-impact alpha programs at the intersection of customers, Product, Research, Engineering, GTM, Security, Legal, and launch teams. We partner with customers to test emerging capabilities with real-world use cases, surface actionable insights, and support launch decisions. Our team is made up of builders who learn quickly, collaborate deeply, create clarity in ambiguity, communicate openly, and iterate constantly. About the Role We’re hiring an Early Access Deployment Engineer to lead technical engagements with customers who are leveraging our frontier capabilities to solve real-world use cases. You will work at the earliest—and often messiest—stage of development, when capabilities are still unclear, tooling and processes are evolving, and the path from promising technology to a valuable real-world application has yet to be defined. You will be a hands-on builder, problem solver, and technical partner to customers and our research/product team. You’ll push beyond initial assumptions, identify high-value use cases, prototype solutions, design useful evaluations, and troubleshoot what is and is not working. Managing multiple customer engagements at once, you will help customers navigate ambiguity and difficult technical decisions while translating their experience into clear, actionable feedback for Research and Product. You will also own the end-to-end execution of early access programs—from onboarding customers, supporting live experimentation, synthesizing findings, and informing launch decisions. You’ll collaborate deeply with Research, Product, Engineering, Applied Evals, GTM, Legal, Security, Marketing, and other launch partners to create clarity, manage risk, and keep programs moving through changing conditions. Success in this role means turning frontier capabilities into real-world customer value and high-quality research signals. You will develop reusable technical approaches from early deployments,

About the Role Amplitude's Cloud Platform team builds the systems that every Amplitude engineer relies on every day to ship code — and we're rebuilding them for the AI era. As a Senior Platform Engineer, you'll own medium-to-high-complexity platform projects end-to-end and help shape a platform where AI agents are first-class users alongside humans: kicking off deploys, opening pull requests against infrastructure, and triaging incidents, so a single engineer can get the throughput of a team. You'll partner with Staff engineers and product teams to make Kubernetes effortless across the engineering org, building self-service automation and scalable AWS infrastructure that lets product teams ship faster, safer, and with less cognitive load. If you're excited about building the systems that other engineers will rely on every day, this role is for you. Key Responsibilities Lead high-impact platform projects — design and ship capabilities that move the needle on developer experience, reliability, or security, and set the bar for quality, testing, and safe deployment practices. Build the AI-augmented platform. Design tooling and workflows that help engineers get more out of AI-assisted development — think infra primitives that are easy to reason about, automated review, and policy-as-code that keeps the guardrails strong as AI shifts how code gets written. Own Infrastructure-as-Code for Kubernetes, AWS, and GCP using Terraform, Helm, Kustomize, and emerging tooling — and make it consumable enough that an LLM can safely PR against it. Evolve our CI/CD backbone (Argo CD / Workflows / Rollouts, GitHub Actions) to make deploys faster, safer, and easier to reason about. Instrument and operate. Drive observability with Datadog and Amplitude, own dashboards and SLOs, and use the data to push reliability forward. Participate in on-call, lead incident response when needed, and turn postmortems into durable platform improvements. Reduce toil and tech debt with pragmatic remediation

Who we are About the team Link is a digital wallet designed for effortless and secure online payments and digital transactions. With Link, consumers enjoy convenience and peace of mind—it works on any device or browser, is backed by the highest security mechanisms, offers purchase protections on eligible items, and ensures seamless and quick payments. Across the Link Engineering org, we focus on building delightful payment experiences and allowing our global consumer base to pay with their preferred payment methods. Our team's work spans the entire stack from front-end experiences, to infrastructure that supports low-latency transactions, to intelligent systems that help protect consumers and merchants from bad actors. Team matching for one of the subteams will begin during final stages. Please note we may also consider you for different orgs based on your experience, location, etc. More information on our team matching process can be found here . What you'll do We're looking for engineers who want to make an impact on payments at a global scale. You'll play a key role in expanding our product suite and the infrastructure that supports it. Our team collaborates with many cross-functional teams and many other teams across Stripe to deliver innovative solutions that address evolving user needs. Responsibilities Build and design the next generation of Stripe products to meet the high-growth needs of our company and customers for years to come Debug and solve critical production issues across services and multiple levels of the stack Mentor engineers to help them grow Collaborate with stakeholders across the company to build new features at large-scale, while improving internal engineering standards, tooling, and processes Collaborate effectively in a distributed and hybrid team, maintaining open communication and strong connections with colleagues Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these r

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. The Opportunity The Security GRC team is responsible for the overall security posture of Postman by ensuring compliance with applicable regulations and contractual obligations and maintaining effective and efficient governance, risk, and compliance programs. In addition, the Security GRC team is directly involved with supporting and enabling Sales and driving security and compliance initiatives to further the growth of Postman. We seek a Senior GRC Engineer who combines deep GRC expertise with strong engineering skills to build and scale automation across governance, risk, and compliance. This is a hands-on technical role focused on designing and operating GRC tooling, integrations, and AI-assisted workflows that reduce manual effort while improving security assurance. The ideal candidate has experience implementing and maturing compliance programs, including SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and FedRAMP, and can translate security and risk requirements into practical engineering solutions. As a senior member of the Security GRC team, you will partner with Security, Engineering, IT, Legal, Sales, and other stakeholders to

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm values security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. The Security Risk Management team is evolving beyond traditional governance, risk, and compliance; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Affirm and our customers. The ideal candidate will design, develop, configure, and implement solutions to complex technical and business problems across the Security Third Party Program and the broader Security Risk Management program. They are equally comfortable shaping policy and shipping automation using modern tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows. They will operate as a subject matter expert, interface with business and engineering stakeholders, and play a key role in transforming Security Risk Management from a compliance oriented function into a security engineering discipline. What You'll Do Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows Build and maintain automation that replaces manual GRC tasks: intake, triage, evidence collection, control validation, tracking, escalations, and reporting, using either Python, low code platforms, and agentic coding tools (Cursor, Claude, etc.) Design and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity providers, and cloud control planes Partner closely with Procurement, Legal, Engineering, IT, Compliance, Privacy, and bus

About Team & About Role The Site Reliability Engineering (SRE) team at Rubrik ensures the absolute reliability, availability, performance, and security of our enterprise infrastructure services, spanning both global SaaS platforms and government-compliant environments. We operate at the intersection of software development and systems engineering, prioritizing hyperscale platform automation, self-healing architectures, and structural resiliency. As a Staff Site Reliability Engineer, you will serve as a primary technical leader and architect across our broader distributed cloud systems. You will drive long-term technical roadmaps, establish cross-organizational reliability standards, and solve complex distributed systems challenges that safeguard both enterprise and public sector environments. Beyond the core SRE charter, this Staff role also leads the Application-SRE team — a US-based group that partners closely with engineering, Sales, and Support to unblock POCs, drive complex customer escalations to resolution, and convert recurring field signals into engineering and reliability roadmap items. You will be the technical leader and project owner for Application-SRE: setting direction, tracking commitments, and ensuring the team operates as a high-leverage bridge between the field and the broader engineering org. What You'll Do As a Staff Site Reliability Engineer, you will possess engineering-wide influence and take ownership of the following critical areas: Infrastructure Strategy & Architecture: Formulate and execute the architectural vision for Rubrik's Cloud Platform, optimizing backend infrastructure systems like Kubernetes, MySQL, and cloud-native services for performance, security, and multi-region scale. Hyperscale Automation & Platform Tooling: Build, scale, and maintain sophisticated custom internal tools, platform controllers, and automation frameworks in Go or Python to systematically eliminate operational toil. AI Infrastructur

Staff Software Engineer - AI Research Infrastructure P-1215 At Databricks, we are obsessed with enabling data teams to solve the world’s toughest problems, from security threat detection to cancer drug development. We do this by building and running the world’s best data and AI platform so our customers can focus on the high-value challenges that are central to their own missions. The Databricks AI Research organization enables companies to develop AI models and agents using their own data, with technologies ranging from post-training open source LLMs to developing advanced multi-agent architectures. Databricks AI does so by producing novel science and putting it into production. Databricks AI is committed to the belief that a company’s AI models and agents are just as valuable as any other core IP, and that high-quality AI should be available to all. Job Description As a Staff Software Engineer, AI Research Infrastructure, you will be developing and running the research stack that powers Databricks AI Research. You will design and build services that schedule, orchestrate, and observe large‑scale training and inference experiment workloads across thousands of GPUs, improve our dev tooling and ensure that researchers can iterate quickly without sacrificing reliability, efficiency, or security. You’ll partner closely with research scientists, ML engineers, and platform teams to turn experimental workloads into robust, repeatable pipelines, and to push the limits of what our infrastructure can support. The Impact you will have As a Staff Software Engineer on the AI Research Infra Team at Databricks, you will: Design and implement infrastructure that supports large‑scale experiments, data processing, and model training (e.g., HPC clusters, GPU fleets, or cloud‑based systems) Enable researchers to go from idea to large‑scale experiment in minutes, not days, by building powerful abstractions for job submission, scheduling, and monitoring. Create tooling that improv

About Zencoder At Zencoder.ai , we build and orchestrate AI agents that ship real work - code, research, operations, and more. What started as developer tooling is becoming a platform where people and agents collaborate across knowledge work tasks. The Opportunity We are looking for a Staff Software Engineer to join our engineering team. This is a critical role for an experienced, hands-on technical leader with a broad and deep skillset across multiple languages such as JavaScript and JVM-based (Java/Kotlin) and strong experience building and scaling distributed systems in cloud environments such as AWS or Google Cloud. As a Staff Engineer, you will help drive the technical direction of aspects of our platform, setting high standards for system design, code quality, best practices and architectural clarity. You will collaborate across product and engineering to simplify complexity, improve reliability, and make deliberate trade-offs that empower our teams to move fast without sacrificing maintainability. This is a unique opportunity to join an early-stage company led by serial entrepreneur Andrew Filev (founder of a unicorn startup), and shape a product that is redefining how software is built. Key Responsibilities Act as a technical thought leader, setting a high bar for engineering quality. Be hands-on, writing code for new features, prototyping, refactoring existing code to meet best practices, etc. Lead design discussions and architecture reviews for high-impact projects. Collaborate with product, design, and research teams to define and evolve user-facing functionality with real developer impact. Evaluate trade-offs thoughtfully across performance, scalability, complexity, and cost and advocate for clear, maintainable solutions. Guide and mentor other engineers, helping them grow while raising the overall technical maturity of the team. Influence engineering culture, driving best practices in testing, observability, security, and cloud design. Essential Q

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Our Senior Software Engineers lead and mentor engineers, delivering high-value products for our customers and infrastructure that enables our business to scale. Vanta’s product monitors the security posture for thousands of companies, pulling tens of millions of API calls of data per day, pushing information from hundreds of thousands of laptop agents, and running tests against that data continuously to identify potential security threats. Our infrastructure and tooling need to stay ahead of exponential growth in our customer base. As a Senior Software Engineer at Vanta, you’ll be responsible for setting technical direction to provide a strong foundation for our infrastructure to scale with our business. You will also drive complex projects across our technical stack and mentor our talented engineering team. Your past experience will be leveraged to enable and accelerate Vanta’s growth. Visit our Vanta Engineering Blog to learn more about what our team is working on! What you’ll do as a Senior Software Engineer on the Identity team at Vanta: As Vanta expands its agentic capabilities across surfaces like MCP, CLI, and the Vanta Agent, the Identity team is at the center of a new set of problems: defining what it means for an agent to act as a user's proxy, enforcing consistent permission checks across every invocation surface, and building an attribution model that makes agent-assisted actions auditable and trustworthy. You'll help design the identity primitives that make autonomous agent behavior safe and governable at scale. You will also: Lead complex projects with multiple stakeholders and engineers to enable our business and

Staff Software Engineer - AI Research Infrastructure P-1215 At Databricks, we are obsessed with enabling data teams to solve the world’s toughest problems, from security threat detection to cancer drug development. We do this by building and running the world’s best data and AI platform so our customers can focus on the high-value challenges that are central to their own missions. The Databricks AI Research organization enables companies to develop AI models and agents using their own data, with technologies ranging from post-training open source LLMs to developing advanced multi-agent architectures. Databricks AI does so by producing novel science and putting it into production. Databricks AI is committed to the belief that a company’s AI models and agents are just as valuable as any other core IP, and that high-quality AI should be available to all. Job Description As a Staff Software Engineer, AI Research Infrastructure, you will be developing and running the research stack that powers Databricks AI Research. You will design and build services that schedule, orchestrate, and observe large‑scale training and inference experiment workloads across thousands of GPUs, improve our dev tooling and ensure that researchers can iterate quickly without sacrificing reliability, efficiency, or security. You’ll partner closely with research scientists, ML engineers, and platform teams to turn experimental workloads into robust, repeatable pipelines, and to push the limits of what our infrastructure can support. The Impact you will have As a Staff Software Engineer on the AI Research Infra Team at Databricks, you will: Design and implement infrastructure that supports large‑scale experiments, data processing, and model training (e.g., HPC clusters, GPU fleets, or cloud‑based systems) Enable researchers to go from idea to large‑scale experiment in minutes, not days, by building powerful abstractions for job submission, scheduling, and monitoring. Create tooling that improv

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for a Head of Field Engineering Operations to join our Revenue Operations team. You'll be a strategic partner to the VP of Field Engineering and build the systems, processes, and team that help our Field Engineering organization scale You will build and lead a team while constantly asking how we can use better tooling, smarter automation, and tighter feedback loops to make the organization faster and sharper. You will report to the VP of Revenue Operations. If you’re based within a pre-determined commuting distance of one of our offices (SF, NYC, or Austin), the role includes in-office anchor days on Monday, Tuesday, and Friday. For location-specific details, please connect with our recruiting team. What you will do: Design the processes, systems, and operating cadences that let Solutions Architects, Developer Success Engineers, Customer Success Engineers, Technical Account Managers, and Professional Services scale Build and lead the Field Engineering Operations team, and set team structures, role definitions, and engagement models as Field Engineering grows Run capacity planning, territory design, and resource allocation across the Americas, Europe, the Middle East and Africa (EMEA), and Asia-Pacific (APAC), in step with go-to-market (GTM) teams Own the pre-sales to post-sales lifecycle framework, including technical win and onboarding forecasts, go-live tracking, and consumption ramp measurement Define the Field Engineering metrics, dashboards, and health scoring models that show team performance, accoun

The Infrastructure team builds the foundation we need to support our web and mobile applications, as well as our robust API. We build and operate the software that enables Asana's security, scalability, and speed. Each day, we combine industry best-practices and innovation to support this product-focused company. We're looking for a Junior Infrastructure Software Engineer (New Grad) with a growing passion for Site Reliability and Operability. You will work with a world-class team of engineers on deploying and operating existing systems, and building new ones for challenges that are unique to our problem space. You will have a unique opportunity to learn how to design, develop, and operate services that power Asana, working on projects that help define the future of our infrastructure and how we architect and operate critical services at scale. This role is based in our Reykjavik office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. What You’ll Achieve Learn and Execute: Experience growth and development by being paired with a mentor who will support and guide you through opportunities to stretch and learn. Engineering Craftsmanship: Participate in Asana’s robust technical boot camps to learn our standards for high-quality, maintainable code. You will eventually own specific technical domains through our Areas of Responsibility (AoR) system. Build Foundations: Contribute to projects that define the future of infrastructure for Asana, learning how we architect and operate critical services at scale. Global Collaboration: Partner with other infrastructure teams in San Francisco, New York, and Warsaw to understand and contribute to our service-oriented architecture while navigating cross-timezone workflows. Tooling & Frameworks: Help develop framework