Software Engineer, Security
Pylon, San Francisco
What you will do
- Own application and product security across what we've shipped and what's still to come, including threat modeling, secure design reviews, and code review on the areas that matter most like auth and access control.
- Build tooling that scales security past one person: supply chain security, vulnerability management, secure-by-default libraries, and developer-friendly guardrails.
- Run the vulnerability lifecycle end to end (triage, validation, prioritization, remediation) and help mature our bug bounty and disclosure programs.
- Build AI-assisted security workflows, like agents that scan code, propose fixes, and surface real risk, along with the controls that let the rest of the team use coding agents safely.
- Work hands-on with engineers to ship fixes and help them build securely by default, telling the difference between theoretical risk and risk that actually matters so we spend effort where it counts.
- Take projects from customer request through design to ship, and own them the whole way through.
- Help with incident response: triage, investigate, and coordinate the fix.