Security Engineer
Merge, San Francisco, CA
The role
As a Security Engineer at Merge, you will be the primary owner of product and application security across our platform. You'll work directly alongside our Head of Security and partner closely with Engineering and Product to find and fix vulnerabilities, shape how we build securely, and ensure our API-first, AI-powered products ship with strong security guarantees. While you don't need specific experience with all of the above, we'd expect you to be excited to learn and grow, and tackle any challenges that may come your way.
What you will do
- Own product and application security across Merge's platform: APIs, integrations, agent tooling, and AI-powered features
- Conduct security reviews, threat modeling, and code reviews with a focus on application-layer vulnerabilities (OWASP Top 10, injection, auth flaws, insecure deserialization, etc.)
- Drive vulnerability identification and remediation across the full SDLC, from design through deployment