Member of Technical Staff, Application Security
About The Position
We're hiring an engineer who builds security into a complex AI-native product, not one who audits it from the outside. You write real code, ship real fixes, and understand how systems are built well enough to know exactly how they break. As AI gets better at building things, the bottleneck shifts to knowing what to build. We're the bridge between AI systems and what humans actually want. Today our customers are companies. Soon, AIs themselves will be our customers. Our platform runs AI-moderated video interviews at massive scale. We find the right people from a network of millions, our AI conducts open-ended conversations with thousands of them in parallel, and we surface what to build next. What used to take research teams weeks per study, we do in hours. Where it's going: every interview feeds a human preference model, exposed to the world through the Human API. AI agents will call Listen from Slack, Linear, IDEs, and coding agents to ask what humans actually want. The trust people place in that signal is everything, and security is how we earn it.
Requirements
- Engineer first mindset, comfortable in a modern backend stack (TypeScript and Terraform used).
- Ability to read and write production code and hold own in code reviews.
- Understanding of how systems are built and how they break.
- Knowledge of OWASP Top 10 as failure patterns of real design decisions.
- Ability to explain why an authorization bug happens.
- Thinking in terms of trust boundaries, threat models, and blast radius.
- Experience in shipping fixes, guardrails, libraries, pipeline checks, or patches.
- Depth in application security fundamentals: authentication and authorization (OAuth/OIDC, sessions, RBAC), cloud and infrastructure security basics, secrets management, secure API design, and common vulnerability classes across web and backend systems.
- Curiosity about AI security and excitement to learn how LLM systems fail.
- Care about getting things right and going to root cause.
- Ability to communicate complex ideas in writing.
- Ability to work independently.
Nice To Haves
- Prior LLM security experience is a plus.
Responsibilities
- Securing the Database of Humanity: Design protections for data including encryption, access boundaries, retention, and abuse resistance, built into the product.
- Multi-Tenant Isolation: Ensure boundaries between tenants, roles, and studies hold up.
- AI-Native Attack Surface: Threat-model prompt injection, data exfiltration through model outputs, tool and agent permissions, and new failure modes related to LLMs.
- Securing the Human API: Help design authentication, authorization, and API surfaces for programmatic and agentic callers.
- Security Engineering Platform: Build secure-by-default libraries and patterns, integrate SAST/DAST/SCA and secrets scanning into CI, manage dependency and supply chain hygiene, and provide fast feedback loops.
- Design and Code Review: Review architecture and pull requests, and often write the fix yourself.
- Solve problems end to end: Scope own work, consider customers and their trust, and own decisions.
Benefits
- Full medical, dental, and vision coverage.
- FSA/HSA and life insurance available.
- Meaningful equity ownership.
- Annual Learning Stipend for books, courses, conferences, coaching, language lessons.
- Annual Wellness Stipend for gym memberships, race fees, massages, ergonomic gear.
- Monthly Stipend for AI tools (software and GPU credits).
- Private chef serving lunch and dinner in SF office; daily meal credit for NYC and London teams.
- Flexible time off (take-what-you-need vacation policy).
- Company offsites and events.
- Room to grow as an early team member.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
