Security Tooling Engineer Jobs

Why Harvey At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. Role Overview Harvey is building AI-native software for professional services. Our customers trust us with some of the world's most sensitive information, making security fundamental to everything we build. As a leader on our Product Security team, you'll help embed security into our engineering organization, enabling teams to build quickly and securely as we scale. Reporting to the Senior Director of Product Security, you'll help shape our product security roadmap and lead a team of engineers in delivering it. Your team will own defined areas of Harvey's production surface, working closely with product and platform engineers to shape architecture, influence design decisions, and build security tooling. You'll combine people leadership with sound technical judgment to protect our cu

Why Harvey At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. Role Overview Harvey is building AI-native software for professional services. Our customers trust us with some of the world's most sensitive information, making security fundamental to everything we build. As a leader on our Product Security team, you'll help embed security into our engineering organization, enabling teams to build quickly and securely as we scale. Reporting to the Senior Director of Product Security, you'll help shape our product security roadmap and lead a team of engineers in delivering it. Your team will own defined areas of Harvey's production surface, working closely with product and platform engineers to shape architecture, influence design decisions, and build security tooling. You'll combine people leadership with sound technical judgment to protect our cu

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! We’re looking for software engineering interns who are excited to make an impact across different layers of our product and infrastructure. At Figma, we pair interns with teams that align with their skills and interests. This year, we're inviting you to share your interests from the start, so we can create the strongest possible match. Our interns are embedded into small, collaborative engineering teams across the company. You’ll work closely with your mentor and teammates to ship meaningful features, tools, or systems. Whether you're working on internal infrastructure or user-facing features, you’ll get to learn, contribute, and grow in a supportive environment. This internship will be based out of our London Hub with a 5/3, 5/17, 6/1 or 6/14 start date. Engineering Interests at Figma: When you apply, you'll tell us which areas you're most interested in to help us understand which kinds of engineering work you're most excited about: Product: Build full stack user facing features, including new collaboration tools, new product workflows, growth oriented experiments, and more Platform/Infrastructure: Build platform level tools, including distributed systems, developer tooling, performance/scalability work, and more Security Engineering: Build security-focused systems, product security tooling, detection, secure infrastructure, or privacy/security features Open: I’m flexible and still exploring different types of work What you'll do at Figma: Join a small engineering team as a full member of the t

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! We're looking for software engineering interns who are excited to make an impact across different layers of our product and infrastructure. At Figma, we pair interns with teams that align with their skills and interests. This year, we're inviting you to share your interests from the start, so we can create the strongest possible match. Our interns are embedded into small, collaborative engineering teams across the company. You'll work closely with your mentor and teammates to ship meaningful features, tools, or systems. Whether you're working on internal infrastructure or user-facing features, you'll get to learn, contribute, and grow in a supportive environment. This internship will be based out of our San Francisco or New York Hub with a 5/3, 5/17, 6/1 or 6/14 start date. Engineering Interests at Figma: When you apply, you'll tell us which areas you're most interested in to help us understand which kinds of engineering work you're most excited about: Product: Build full stack user facing features, including new collaboration tools, new product workflows, growth oriented experiments, and more Backend/Infrastructure: Build platform level tools, including distributed systems, developer tooling, performance/scalability work, and more Security Engineering: Build security-focused systems, product security tooling, detection, secure infrastructure, or privacy/security features Open: I'm flexible and still exploring different types of work What you'll do at Figma: Be fully embedded onto a Figma

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! We're looking for software engineering interns who are excited to make an impact across different layers of our product and infrastructure. At Figma, we pair interns with teams that align with their skills and interests. This year, we're inviting you to share your interests from the start, so we can create the strongest possible match. Our interns are embedded into small, collaborative engineering teams across the company. You'll work closely with your mentor and teammates to ship meaningful features, tools, or systems. Whether you're working on internal infrastructure or user-facing features, you'll get to learn, contribute, and grow in a supportive environment. This internship will be based out of our San Francisco or New York Hub with a January 4, 2027 start date. Engineering Interests at Figma: When you apply, you'll tell us which areas you're most interested in to help us understand which kinds of engineering work you're most excited about: Product: Build full stack user facing features, including new collaboration tools, new product workflows, growth oriented experiments, and more Platform/Infrastructure: Build platform level tools, including distributed systems, developer tooling, performance/scalability work, and more Security Engineering: Build security-focused systems, product security tooling, detection, secure infrastructure, or privacy/security features Open: I'm flexible and still exploring different types of work What you'll do at Figma: Be fully embedded onto a Figma engineering

Supabase is the Postgres development platform, built by developers for developers to help them ship countless products that people love. More than 7 million developers trust us with their data, and we are custodians of every byte of it. Security is foundational to that trust, and as we move deeper into AI-native development, regulated industries, and enterprise, it shapes whether a developer chooses us on day one and whether a regulated company can build their most sensitive workloads on Supabase. About the role We're looking for a PM who can balance the constant tension between security and developer experience at platform scale. Every control you add is friction a developer has to absorb, and every default you loosen is a door an attacker could walk through. Finding the right balance between protecting customers and keeping them fast is the work of this role. You'll partner with Security Engineering, Compliance, and the platform teams that own auth, networking, and audit. This is a remote position and we're open to considering candidates located across EMEA and AMER time zones. In This Role You Will Set the security agenda for the platform. Lead Supabase's platform security roadmap end-to-end, from the defaults that protect a developer prototyping their first project to the advanced controls a Fortune 500 CISO needs before approving us. Hold the line between security and developer experience. Every security feature trades protection against friction. A control that's too strict pushes developers off the platform; one that's too easy to bypass doesn't protect anyone. Lead our security strategy for AI agents. Agents now read, write, and deploy on behalf of developers and companies, often at machine speed. You'll lead how Supabase authenticates, scopes, and audits agent activity so customers can give them real capability while staying in control of their data. Own our security product surface. Drive the roadmap for the security tooling customers use to operate safely

Technical Lead / Platform Solution Architect Mission Value: Serve as the technical authority across a complex, multi-vendor AI and software platform, helping the government team make sound architecture decisions, resolve cross-platform integration challenges, and establish repeatable patterns that accelerate mission delivery. Role Description Defense Unicorns is seeking a senior Technical Lead / Platform Solution Architect to embed with a government team and serve as the go-to technical subject matter expert across the platform architecture. This individual will connect the mission, engineering, security, data, AI, and vendor perspectives into a coherent technical approach and become a trusted technology advisor to the mission hero. The role is intentionally hands-on and strategic. The Technical Lead will work across Kubernetes/OpenShift, GitLab and CI/CD, AI/agent infrastructure, enterprise data services, cloud infrastructure, security controls, and integration patterns. They will guide technical decisions, challenge assumptions, identify architectural risks early, and help the team move from prototype to operational capability. The ideal candidate can move fluently between executive-level mission conversations and deep technical discussions with engineers and OEM teams. Responsibilities Own the end-to-end technical architecture and serve as the primary technical SME across the platform ecosystem. Become a trusted technology advisor to the mission hero, translating mission objectives into pragmatic technical choices and providing clear recommendations, tradeoffs, and risk assessments. Create and maintain the architectural “big picture” across application, platform, AI, data, networking, security, identity, and integration layers. Lead technical integration across commercial and government technologies, including Kubernetes/OpenShift, GitLab, AI/ML services, enterprise data platforms, and supporting security tooling.Identify architectural dependencies, integration r

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the comination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU Box is building a modern, AI-first Strategic Sourcing and Procurement Intelligence & Operations organization that makes it easier for Boxers to buy, scale, and manage technology spend — while unlocking business value, maintaining strong controls, and mitigating third-party risk. WHAT YOU'LL DO We are looking for a Senior Strategic Sourcing Partner to partner directly with our Box stakeholders, with a focus on Build (Engineering) and Box Security organizations. In this role, you will lead end-to-end sourcing lifecycles, manage commercial and technology contracting, drive proactive renewals, and optimize supplier performance across mission-critical cloud software, security tooling, and support Procurement Operations with reporting a

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do. What You’ll Do: Conduct red and purple team engagements simulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments. Penetration test specific, high value deployments. Contribute to AI-assisted security testing tooling and workflows. Work cross functionally with other security and engineering teams, particularly on AI-specific attack scenarios. Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps. Who You Are: 5+ years of hands-on experience in red teaming and offensive security operations Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines Track record of discovering novel attack vectors and chaining vulnerabilities creatively Experience conducting adversarial simulations against well-defended environments Strong engineering skills (Python, Go, or similar) Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes Collaborative approach, working in close collaboration with the blue team Strong candidates may also have experience with:

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role: Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude. The attack surface is unlike most AppSec work: multi-agent orchestration, sandboxed code execution, agents holding delegated credentials, untrusted tool output crossing trust boundaries — problems with little prior art and no off-the-shelf playbook. The way the team works is also different. We use Claude as our primary tool across every part of the job: it drives our static analysis, drafts and fixes vulnerabilities as pull requests, performs first-line bug bounty triage, and assists threat modeling for design reviews. The human work is the judgment layer — system-level reasoning, deciding what matters, and building the next thing the model can't do yet. This is a builder's role on a senior team. We hire engineers who ship production systems and clear a hands-on threat-modeling bar — people who can find the vulnerability but would rather build the system that finds them all. Every engineer owns a system end-to-end, and the team's work has shaped customer-facing product security — including Claude Code's security review tooling, its security guidance plugin, sandboxing, and auto mode. Key responsibilities: Design, build, and operate Claude-powered security systems — LLM-driven code analysis, automated vulnerability remediation, AI-assisted threat modeling — and own one or more of them end-to-end, including the cross-functional relationships that come with it Lead secure design reviews and threat modeling for novel AI systems, identifying risks that don't map to existing frameworks Evolve a public bug bounty program

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Team We safeguard Okta from threats and vulnerabilities that could disrupt our business or erode our customers’ trust. The Defensive Cyber Engineering organization is responsible for the Security Data Platform, infrastructure, and tooling that enable Okta’s Detection and Response capabilities. The team also manages enterprise security tools and infrastructure that support XDR, DLP, and SSPM capabilities. The Role We are expanding this team to support Okta’s Public Sector roadmap by hiring a Staff Software Engineer in the DC area. You’ll work closely with Security, Business Technology Engineering, and Product teams to implement and manage security solutions, ensuring our core infrastructure applications protect our workforce, endpoints, and corporate data. To deliver on this vision, you will build data and infrastructure platforms by leveraging your software, data, and security engineering skills. You’ll use automation, policy-as-code, and cloud-native technologies to deliver scalable, resilient, and secure solutions. What you bring: 8+ years of strong coding and scripting experience, with a focus on building automation and custom tooling for security engineering teams. Experience with Python is required; proficiency in other languages (e.g., Bash, PowerShell, Go) is a plus. Experience developing and maintaining ETL/ELT pipelines for onboarding security data into Okta’s security data lake. Experience working with security teams to integrate log sou

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role We are actively looking for a talented software engineer to join the Infrastructure team with a focus on improving Engineering Productivity, specifically our Bazel and C++ infrastructure. Example projects include optimizing Bazel, extending and onboarding services to Bazel, improving C++ support through Bazel and our entire infrastructure. This will have a cross-company impact allowing engineers to quickly iterate locally on microservices and firmware. We are committed to a thriving in-office culture. This role requires you to be onsite at our HQ in San Mateo, CA (with flexibility to work from home). What You'll Do Make every engineer’s day-to-day productive and enjoyable! Define engineering tooling roadmap Own Kubernetes deployment and development tooling Build various software and hardware testing frameworks Provide technica

GAQ125R25 As Head of Corporate Engineering, you will be responsible for Enterprise engineering and operations globally. You will be responsible for building and managing a highly technical enterprise engineering team, developing first principled-based strategies, and enabling strong enterprise security. Key responsibilities include engineering, securing and optimizing cloud infrastructure, Identity and Access Management, Endpoints, Collaboration tools, and ensuring compliance with SOX, PCI DSS, and FedRAMP compliance. The Head of Corporate Engineering will work closely with R&D on managing engineering tools like Jira, Confluence, and GitHub, driving efficient adoption and integration. Strong technical and influencing leadership principles coupled with the ability to manage a complex, scaling, and fast-moving enterprise environment are essential. This role reports directly to the Vice President, Infrastructure and Operations Responsibilities: In this influential role, you will be responsible for: Securing the Enterprise: Working closely with Enterprise Security organization to harden and secure our cloud environments, secret management, collaboration tools, endpoints, SaaS environments, IAM tools, and more. Success measured in continuous improvement of our enterprise security hardening standards Building and Scaling our Cloud Infrastructure : Your team will be responsible for establishing and implementing enterprise cloud infrastructure including establishing Infrastructure Provisioning, SRE services, 24/7 on-call support, Infra as Code, observability, and more. In addition, you will be responsible for managing cloud budgets, vendor management, and establishing cost optimization initiatives. Success is measured in increased developer velocity while securing & scaling the cloud infrastructure Engineering Tooling : Partner closely with R&D teams to establish policies, configurations, run-books, SLAs, hardening, scalability and availability of engineer

Location : Come and join us in Hamburg or Berlin! Following Lyft’s acquisition of Freenow, we are looking for a Senior TPM to lead the technical workstreams that get us to Day 1 readiness — the period between signing and closing — and to set up the integration that follows. This is a high-stakes, high-visibility role reporting into the EU Tech Leader, with direct exposure to Freenow and Lyft leadership. You will be the single point of accountability for technical Day 1 readiness. That means making sure every employee, every office, and every critical system is ready to operate underFreenow by Lyft from the moment the deal closes — and that the integration stream is up and running the day after. You will also be the TPM accountable for the integration of future acquisitions Freenow makes. This is not a role for someone who wants to administer a project plan. You are expected to be technically credible, opinionated, and comfortable holding senior people to account across IT, Security, Infrastructure, Engineering, Legal, People, and Finance. You make decisions when others stall, escalate cleanly when you can’t, and keep the whole machine moving. YOUR DAILY ADVENTURES WILL INCLUDE: Day 1 readiness. Own the end-to-end technical readiness plan between signing and closing. Define what “ready” means, track every workstream against it, and call the go/no-go on technical readiness for Day 1. IT and workplace cutover. Coordinate identity and system access (SSO, IdP, mail, productivity suite, engineering tooling), hardware provisioning and re-imaging, and office setup including network, VPN, Wi-Fi, meeting rooms, and physical access. Make sure nobody shows up on Day 1 unable to work. Security and compliance posture. Partner with Security and Legal to make sure the technical environment meets the new shareholder’s requirements on Day 1 — access controls, data handling, audit trails, vendor relationships. Integration stream kickoff. Stand up the technical integration workstreams

Location : Come and join us in Hamburg or Berlin! Following Lyft’s acquisition of Freenow, we are looking for a Senior TPM to lead the technical workstreams that get us to Day 1 readiness — the period between signing and closing — and to set up the integration that follows. This is a high-stakes, high-visibility role reporting into the EU Tech Leader, with direct exposure to Freenow and Lyft leadership. You will be the single point of accountability for technical Day 1 readiness. That means making sure every employee, every office, and every critical system is ready to operate underFreenow by Lyft from the moment the deal closes — and that the integration stream is up and running the day after. You will also be the TPM accountable for the integration of future acquisitions Freenow makes. This is not a role for someone who wants to administer a project plan. You are expected to be technically credible, opinionated, and comfortable holding senior people to account across IT, Security, Infrastructure, Engineering, Legal, People, and Finance. You make decisions when others stall, escalate cleanly when you can’t, and keep the whole machine moving. YOUR DAILY ADVENTURES WILL INCLUDE: Day 1 readiness. Own the end-to-end technical readiness plan between signing and closing. Define what “ready” means, track every workstream against it, and call the go/no-go on technical readiness for Day 1. IT and workplace cutover. Coordinate identity and system access (SSO, IdP, mail, productivity suite, engineering tooling), hardware provisioning and re-imaging, and office setup including network, VPN, Wi-Fi, meeting rooms, and physical access. Make sure nobody shows up on Day 1 unable to work. Security and compliance posture. Partner with Security and Legal to make sure the technical environment meets the new shareholder’s requirements on Day 1 — access controls, data handling, audit trails, vendor relationships. Integration stream kickoff. Stand up the technical integration workstreams