[Remote] Security Engineer

Note: The job is a remote job and is open to candidates in USA. Roboflow is a company dedicated to making the world programmable through artificial intelligence and computer vision. They are seeking a Senior Security Engineer to enhance security across their entire stack, from Kubernetes configurations to application logic, while also building tooling and automation to prevent vulnerabilities.

Responsibilities

• Own the Stack: Secure everything from our Kubernetes clusters on the cloud to our SaaS integrations and developer workflows
• Usher in the Future: articulate and execute on a vision for what security should be in the age of LLMs giving both us and attackers increasing leverage
• Engineer for Security: Build internal tooling and CI/CD automations that catch vulnerabilities before they ever hit production
• Architect & Model: Lead threat modeling sessions and secure code reviews, ensuring we design "secure-by-default" APIs and deployments
• Harden the Perimeter: Take a first-principles approach to hardening authentication and access control across all internal and external surfaces
• Red Team: proactively probe for vulnerabilities and lead the remediation
• Lead the Bug Bounty: You will be the primary owner for standing up, launching, and managing our Bug Bounty Program, triaging reports, and driving remediation
• Respond & Remediate: Investigate vulnerabilities, lead incident response, orchestrate pen testing, and run blameless postmortems that actually result in systemic change
• Evangelize: Be the partner, not the blocker. Translate complex security risks into actionable engineering tasks that your peers can get excited about

Skills

• 6+ years of experience in software/infrastructure engineering with a deep obsession with security
• Deeply familiar with Google Cloud (GCP), Kubernetes, and containerized environments
• Ability to analyze a system for weaknesses whether they are buried in business logic, IAM configurations, or the codebase
• Track record of responding to real-world incidents and leading remediation efforts
• Experience in building internal tooling and CI/CD automations that catch vulnerabilities before they ever hit production
• Experience in leading threat modeling sessions and secure code reviews
• Experience in hardening authentication and access control across all internal and external surfaces
• Experience in managing a Bug Bounty Program
• Experience in a startup environment of 100–200 people
• Experience in translating complex security risks into actionable engineering tasks

Benefits

• $4000/yr Travel Stipend to travel anywhere anytime to work alongside other Roboflowers
• $350/mo Productivity stipend to spend on things that make your work environment more productive, like high-speed internet at home or a co-working space
• Cover up to 100% of your health insurance costs for you and your partner or family
• Equity in the company so we are all invested in the future of computer vision

Company Overview

Company H1B Sponsorship