Staff Software Security Engineer Jobs

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Application Security Engineer) to own the security of the software Hark ships. You'll review design and code, find and fix vulnerabilities in our backend services, mobile apps, and third-party integrations, and build the guardrails that let engineers move fast without shipping bugs. Our agents act on behalf of users across their apps and data, so you'll also be defining how to secure LLM and agent systems, a space with very few established playbooks. This role is hands-on; you'll be reading code, writing fixes, and building tooling, not managing or auditing. Responsibilities Threat-model new features and services, with a focus on agent/LLM attack surfaces (prompt injection, tool misuse, data exfiltration, cross-tenant access). Review code and designs for Hark's backend services (primarily Go), APIs, and mobile apps; fix vulnerabilities directly when it's faster than filing a ticket. Secure authentication, authorization, and session handling across our consumer product, including OAuth integrations with third-party platforms. Build and tune SAST, dependency, and secrets scanning in CI so findings are high-signal and developers actually act on them. Triage and remediate findings from pentests and our

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Identity Threat Protection Team Identity Threat Protection (ITP), powered by cutting-edge Okta AI, shatters the mold of traditional login security. We deliver real-time, surgical defense against the most sophisticated and rapidly evolving threats. By deeply integrating with existing security infrastructure, ITP relentlessly analyzes user behavior and system data to proactively hunt down and neutralize risks before they impact our customers. Join an elite team of full-stack engineers, visionary data scientists, and pioneering ML engineers. We are not just redefining cloud authentication—we are engineering the next-gen security platform that continuously evaluates global threats and constructs a comprehensive, dynamic risk . ITP stands as the uncompromising guardian of trust and security, placing decisive risk prioritization at the core of every authentication and authorization decision. Identity Threat Protection with Okta AI The Staff Software Engineer Opportunity Okta is seeking a Staff Software Engineer to be a driving force on the ITP engineering team. This is your chance to dive into the deep end and solve the most critical and complex security challenges facing enterprises today. We seek a candidate who has not just experience, but a proven record of designing, building, launching, and scaling world-class security products —from concept to global deployment. You will be a technical cornerstone of a team that lives and breathes elegant solutions and

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. Staff Software Engineer: Platform Every engineer at Flexport ships code that moves real freight across 112 countries. The faster and safer they can do that, the faster the world's supply chains move. The PSI (Platform, Security & Infrastructure) team makes this possible: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. This is not a role where you wait for tickets. You'll talk to engineers, dogfood our platform, and find the friction that's slowing us down, and then design and ship the tools to remove that. What You'll Do You'll own and evolve the developer platform that powers Flexport engineering. That means: Making the best paved paths and self-serve tooling possible that makes the right thing the easy thing, protected by guardrails but not locked gates. Creating and supporting developers with CI/CD pipelines (Buildkit, Github Actions), build tooling (Gradle, Bazel, npm/pnpm/bun, Go and Cargo) and artifact repositories (Artifactory, ECR, github). Owning and improving the backend and frontend developer experience. Acting as the steward of our GraphQL and gRPC ecosystem and make sure our middleware, fed

The AI organization at Asana builds the platform and products that bring AI into how the world's teams work. That includes AI Teammates that take on work alongside people, the orchestration layer that lets agents plan and act across the Work Graph, and the AI platform that every AI feature at Asana runs on. The platform covers model access, retrieval, context, evaluation, and production quality. We are looking for a Senior Staff Software Engineer to set technical direction across this organization. You will lead the hardest cross-team problems in AI at Asana, make architectural calls that hold up as models and the industry shift underneath us, and help senior leadership shape where AI takes the product next. The scope spans multiple engineering teams across San Francisco, New York, Vancouver, and Warsaw. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve Define the technical vision and architecture for Asana's AI Org that includes AI platform, Agent systems and Studio in partnership with engineering and product leadership Partner with Product, Design, Data Science, Security, and Legal to take ambitious AI products from prototype to reliable, trusted enterprise features Lead strategic initiatives that span multiple teams, such as agent runtime and orchestration, context and memory for agents grounded in the Work Graph, and reliable, cost-efficient LLM inference at enterprise scale Set the bar for how Asana measures AI quality, including offline and online evaluation, production monitoring, and the feedback loops that turn real usage into better agents Make and guide high-stakes technical d

About the Team OpenAI’s Application Engineering team builds the internal products and platforms that help OpenAI operate securely and at scale. We engineer, own, and evolve OpenAI’s core productivity ecosystem, creating secure applications, integrations, automation, and reusable tooling where off-the-shelf software is not enough. Our work spans employee-facing experiences and the services, APIs, control planes, and governance that make them reliable, permission-aware, and scalable. We also act as a customer zero for OpenAI’s technology, building the enterprise foundations that let employees and agents safely access the context, tools, and actions they need. We partner closely with IT, Security, product teams, and platform providers to turn company-wide problems into durable systems, learn from real internal workflows, and help shape the products we deploy. We create paved paths that let teams move quickly without compromising security or operational quality. About the Role As a Staff Software Engineer on Agent Productivity, you will shape the foundation that enables teams to build agents with secure access to the context and capabilities they need. Slack will be the first and deepest implementation surface—and where you spend most of your time—owning its application architecture, integrations, APIs, governance, and administration automation while building patterns that extend to internal systems, identity platforms, and other enterprise applications. This is a hands-on engineering role with broad organizational impact as agents support more employee workflows. You will define platform architecture, build reusable foundations, and establish secure patterns for identity, permissions, connectivity, and operations that make agents easier to develop, deploy, and manage. In this role, you will: Own the technical strategy and architecture that enable teams to build, connect, and deploy agents quickly and safely, using Slack as the primary implementation surface. Design and

Who We Are Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. Addepar unifies portfolio, market and client data in a total portfolio view and delivers AI-powered insights within investment and client workflows. More than 1,500 firms in 60 countries use Addepar to manage and advise on nearly $10 trillion in assets. Its open platform integrates with 650 software, data and consulting partners to power end-to-end investment operations across firms of all sizes and levels of complexity. Addepar supports clients worldwide with offices in New York City, Salt Lake City, São Paulo, London, Edinburgh, Geneva, Warsaw, Dubai, Pune and Singapore. The Role We are currently seeking an IAM Analyst to join our growing Information Security & Risk team . The successful candidate will have the opportunity to help take Addepar’s Internal Identity & Access Management program to the next level. In this role, this person will work as part of the internal Identity & Access Management (IAM) function to improve the overall security posture of the organization. Applicants must have, and maintain, the right to work in the United Kingdom from the first day of employment. Please note that visa sponsorship is not available for this role. What You’ll Do Provide operational support for IAM related administration tools: Application onboarding and role definitions Recertification campaigns based on security and audit requirements Handling end user escalations and support requests Assist with improving the overall maturity of the internal IAM program: Analyze, design, and implement improvements to data quality and role decisions across integrated systems. Governance Initiatives, such as Entitlement Reviews and proper inventory management of identities Enhancing IAM posture including human and non-human identities. Continually improve the I

We are looking for a Senior Director of Platform Engineering to lead the strategy, architecture, execution, and organizational development of our Platform Engineering function. This role is accountable for the foundational capabilities that enable engineering teams to build, deploy, operate, secure, and scale software efficiently and reliably. The Senior Director will own the evolution of our internal developer platform and shared engineering infrastructure, bringing together cloud, Kubernetes, CI/CD, observability, reliability, security, developer experience, and automation into a coherent platform strategy. The role requires a combination of deep technical judgment, organizational leadership, and platform product thinking, with the ability to operate effectively with senior engineers, engineering leaders, security, architecture, finance, and executive stakeholders. Key Responsibilities Define and own the multi-year Platform Engineering strategy, architecture, and roadmap , aligned with company and engineering objectives. Lead the evolution of the Internal Developer Platform , creating paved roads and self-service capabilities that reduce cognitive load and accelerate software delivery. Own strategic direction across cloud infrastructure, Kubernetes, networking, CI/CD, observability, reliability, Infrastructure as Code, platform security, developer tooling, and FinOps. Lead and develop a high-performing organization of Engineering Directors, Managers, Principal/Staff Engineers, and platform teams. Establish clear ownership, engineering standards, architectural principles, governance mechanisms, and measurable platform outcomes. Drive improvements in developer productivity, delivery performance, reliability, scalability, security, and infrastructure efficiency . Ensure platform services are designed for high availability, fault isolation, scalability, disaster recovery, and controlled blast radius. Own Security Engineering to embed secure-by-default, policy-as-code,

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. We are looking for a Sr. Staff Software Development Engineer, Provisioning Platform to join our Zero Trust Exchange department. This is a hybrid position based in San Jose, CA (HQ), reporting to the Sr. Director, Software Development Engineering. The Sr. Staff Software Development Engineer will help architect and build Zscaler’s next-generation Provisioning Platform, powering SKU provisioning, entitlement management, workflow orchestration, subscription lifecycle management, and self-service experiences across Zscaler products. This is a backend-focused platform role requiring strong Java/Spring Boot expertise, distributed systems experience, API-first design, and the ability to build scalable, reliable systems that support both automation and Agentic AI-assisted user experiences. What you’ll do (Role Expectations) Lead the design and development of scalable backend services for provisioning, licensing, entitle

Build something people love Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $155 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada. We're proud of what we've built — and we're just getting started. Read our Culture Manual and learn more about how we work . About the Role This is a Senior Technical Recruiter role built for someone who can move fluidly across our R&D disciplines ( Engineering, Data Science, Security, and Platform Engineering) , whatever's most critical that week. You won't be boxed into one team or one specialty. One day you're closing a Staff Software Developer, the next you're deep in a Security loop, the next you're building pipeline for a Data Science search that hasn't opened yet. If you thrive on variety and can context-switch without losing quality, this is your seat. You build pipelines before roles even open, partner with hiring managers as a trusted advisor, and run hiring processes that are fast, sharp, and never compromise on talent. You set the tone. You keep momentum. You get it done. What You'll Own Full-cycle recruiting across all of R&D - any team, any level, any complexity. Proactive pipeline building in niche, hard-to-fill technical spaces before a req exists, not after. Hiring strategy that actually moves the needle by partnering closely with Hiring Managers, HRBPs, and Finance on headcount, prioritization, and market reality. AI-forward sourcing and workflow using modern tooling to move faster, without losing the human touch candidates remember. Data-driven funnel management - tracking KPIs, catching risk early, and using signal (not gut feel) to shar

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm is building the next generation of customer identity and authentication. This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth. You will build and operate backend services that power registration, login, authorization, and account lifecycle flows across B2C and B2B experiences. You will work closely with partner engineering teams and ensure identity features are delivered with strong security fundamentals, reliability, and operational rigor. • What you'll do You have 7+ years of experience designing, developing and launching backend systems at scale using languages like Python or Kotlin. You have an extensive track record of developing highly available distributed systems using technologies like AWS, MySQL, Spark and Kubernetes. You have strong verbal and written communication skills that support effective collaboration with our global engineering team. You have experience delivering major features, system components or deprecating existing functionality in a system through the definition of a technical and execution plan. You write high quality code that is easily understood and used by others. Design, build, and operate core CIAM backend services that support customer registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms. Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code, ensuring correctness, scalability, and clean integration patterns. Develop backend APIs and services in Python and Kotlin that expose identity capabilities to web, mobile, and partner applications. Integrate CIAM platforms with internal systems, including user data stores, messaging, fraud

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm is building the next generation of customer identity and authentication. This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth. You will build and operate backend services that power registration, login, authorization, and account lifecycle flows across B2C and B2B experiences. You will work closely with partner engineering teams and ensure identity features are delivered with strong security fundamentals, reliability, and operational rigor. • What you'll do You have 7+ years of experience designing, developing and launching backend systems at scale using languages like Python or Kotlin. You have an extensive track record of developing highly available distributed systems using technologies like AWS, MySQL, Spark and Kubernetes. You have strong verbal and written communication skills that support effective collaboration with our global engineering team. You have experience delivering major features, system components or deprecating existing functionality in a system through the definition of a technical and execution plan. You write high quality code that is easily understood and used by others. Design, build, and operate core CIAM backend services that support customer registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms. Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code, ensuring correctness, scalability, and clean integration patterns. Develop backend APIs and services in Python and Kotlin that expose identity capabilities to web, mobile, and partner applications. Integrate CIAM platforms with internal systems, including user data stores, messaging, fraud

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Security Governance Engineer, you will be the individual contributor who owns how GitLab writes, maintains, communicates, and measures its security policies and standards. You will turn emerging regulations, including AI regulation, into clear requirements that engineering, product, and legal teams can act on, and you will use automation to keep governance lightweight and continuous rather than a point-in-time exercise. You will sit on the Security Governance team within Security Assurance and work closely with Security Compliance, Security Risk, and GRC Engineering. You will report to the Dire

The team Product Platform builds the foundations behind Cash App and Square. We own shared systems, abstractions, and tools that help product teams build high-quality iOS experiences with speed, consistency, and confidence, while shaping how AI-native development is adopted across our engineering organizations. The role As a Staff iOS Engineer on Product Platform, you will be a hands-on technical leader and a multiplier for iOS engineering. You will identify important problems that do not yet have clear ownership, prove a direction through hands-on work, and create systems that other teams can adopt. You will influence iOS architecture, developer experience, performance, reliability, security, and product quality across multiple teams. This is an individual contributor role with organization-level scope. Your goal is not to become a permanent bottleneck. You will create leverage through clear interfaces, strong documentation, sound technical decisions, and new technical leaders. You will Build and evolve the iOS platform Own and evolve foundational iOS systems, such as application architecture, navigation, deep linking, dependency management, lifecycle management, and shared user interface foundations. Design shared libraries, frameworks, and developer tools that product teams rely on. Find and frame systemic iOS problems that do not yet have clear ownership. Define technical strategy, architecture, standards, and measures of success across teams and applications. Build prototypes, reference implementations, and critical paths that prove a direction before broader adoption. Lead multi-quarter migrations and foundational initiatives from proposal through adoption. Establish durable practices for testing, observability, performance, release safety, security, and maintainability. Improve developer and AI ergonomics so both engineers and coding agents can work effectively with the platform. Contribute platform technology to open source when it creates value for the broa

The Team Bitcoin at Block builds products and platforms that help make bitcoin, stablecoins, and non-custodial wallets accessible to people around the world. We work across Cash App, Square, and Bitkey to create secure, reliable, high-quality mobile and hardware experiences used by millions of people. We’re looking for an iOS engineer who loves building products and can move quickly through unfamiliar problems. You’ll work closely with product, design, and engineering partners to turn complex financial capabilities into clear, reliable customer experiences. The Role As a Staff iOS Engineer on Bitcoin, you will own the technical direction and delivery of a critical area of our iOS product experience with bitcoin and stablecoin. This is a hands-on role: you’ll prototype new ideas, make architectural decisions, write production code, and lead work through launch and ongoing improvement. The work extends beyond the client. You’ll align product requirements with backend capabilities, resolve dependencies with partner teams, and make tradeoffs across customer experience, delivery speed, security, and reliability. You’ll personally tackle the hardest design and implementation problems while helping other engineers contribute effectively. Your impact will come from shipping valuable products and making the next release better: fewer recurring problems, clearer interfaces, stronger testing, and practices the team can use independently. You Will Build and evolve the iOS product Build products in iOS related to bitcoin, stablecoin and non custodial wallets. Work across interfaces in Cash App, Square and Bitkey. Own complex features end to end, including client architecture, service integration, testing, rollout, and post-launch improvements. Work with product and design to shape customer journeys, prototype new interactions, and turn open questions into delivery plans. Build prototypes, reference implementations, and critical paths that prove a direction before broader adoptio

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. About Okta Secures AI Team The Okta for AI Agents Team is building the future of digital identity management. The way companies are using agents and allowing them access is undergoing a fundamental shift, enabling teams to move fast while staying secure. Our North Star is clear: To get AI right, you have to get identity right. We are not just managing identities; we are building the industry's first Identity Security Fabric for the agentic era. As organizations rapidly deploy AI, these non-human entities are acting with access to critical tools, often bypassing traditional perimeters and creating a 'Shadow AI' crisis. Our mission is to move identity from a reactive gatekeeper to a unified control plane, transforming AI risk into business ROI. We are tackling this by implementing a comprehensive four-pillar maturity model: Discover, Onboard, Protect, and Govern. We are driving innovation by defining the standards for Agentic Identity—including pioneer work with securing AI Agents and support for protocols like MCP. You will be helping us build the infrastructure that allows enterprises to scale AI safely, ensuring every access decision—whether made by a human or an automated agent—is authenticated, authorized, and audited at scale. We are a diverse team of engineers, product managers, and designers who are bringing Okta’s expertise in identity to define the future of Agent Identity management, focusing on enablement while staying secure. About the role