Senior Security Engineer, AI Security
About The Position
Security Engineers at Dropbox safeguard its digital ecosystem and help protect its products and users. In this role, you will shape how Dropbox secures AI systems and agentic workflows by building and operating controls that protect the infrastructure, tools, and data they rely on. The work addresses risks such as prompt injection, secure agent access, and MCP integrations, translating emerging threats into practical, reusable safeguards. You will partner across engineering and security to enable safe AI adoption while protecting customer data. The role includes infrastructure-level security work across Dropbox’s AI and agentic infrastructure, including cloud infrastructure, Kubernetes, and data stores. It also involves secure identity, authorization, and networking patterns for AI agents and other non-human actors; governance and security implementation for AI tools; and ongoing assessment and hardening of Dropbox’s infrastructure. You will build, deploy, or operate security infrastructure for on-premises and cloud environments, collaborate with cross-functional teams, and lead initiatives that influence product decisions and improve security posture. Some Dropbox teams have on-call rotations requiring availability during core and non-core business hours. Engineers on teams with such rotations are expected to participate as part of their employment; applicants are encouraged to ask about the rotations for the team they are applying to.
Requirements
- 8+ years of security experience, with impactful contributions to security strategies.
- Hands-on experience securing agentic AI systems and implementing controls for AI-specific vulnerabilities such as prompt injection, data or model poisoning, and AI supply-chain risk.
- Experience designing and implementing identity and authorization for non-human workloads and agents using frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud-provider equivalents.
- Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
- Experience with agentic frameworks and MCP tool integration.
- Experience with cloud security technologies for AWS, GCP, or Microsoft Azure.
- Proficiency in one or more scripting or high-level programming languages, such as Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, or Java.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience, with coding proficiency.
Nice To Haves
- Experience securing MCP-based systems or similar AI agent and tool protocols.
- Experience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakers.
- Familiarity with NIST AI RMF, NIST SP 800-218A, and OWASP LLM and agentic security guidance.
- Experience with Kubernetes and container security.
- Experience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM, or SOAR.
- Certifications such as CISSP, CISM, or equivalent.
- Involvement in security community activities, conferences, or publications.
Responsibilities
- Design, deploy, and operate infrastructure-level security controls for Dropbox’s AI and agentic infrastructure, including cloud infrastructure, Kubernetes, and data stores.
- Design and implement secure authentication, authorization, and networking patterns for AI agents and other non-human actors.
- Lead security implementation for secure use of AI tools and governance.
- Maintain and continuously improve the security of Dropbox infrastructure to protect customer data.
- Review current and upcoming infrastructure stacks from a security perspective and provide hardening mechanisms and recommendations.
- Deploy, build, and/or operate security infrastructure solutions to scale and improve security across Dropbox’s on-premises and cloud infrastructure.
- Collaborate with cross-functional teams and lead security initiatives to influence product decisions and enhance security posture.
- Participate in an on-call rotation if the team has one; rotations may require availability during core and non-core business hours.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
