Staff Security Engineer

Rox Data Corp•San Francisco, CA

8d•Onsite

About The Position

Rox is hiring a Staff Security Engineer to own security end to end across product and application security, cloud and infrastructure security, and the security aspects of enterprise customer work. Rox agents handle customers’ sensitive revenue data, making security central to enterprise trust. The engineer will set secure-engineering standards, identify and correct engineering anti-patterns, and communicate security risks and tradeoffs clearly to engineers, executives, and customers. The role reports initially to the VP of Engineering and works closely with Platform, Foundations, Forward Deployed Engineering, and the go-to-market team on enterprise deals. It is based onsite at Rox’s San Francisco headquarters; candidates must be located in or willing to relocate to San Francisco. Participation in a security-incident on-call rotation is required.

Requirements

At least 10 years of experience in security engineering, application security, or infrastructure engineering with a strong security focus, including experience operating at Staff-level scope.
Strong software engineering skills, including the ability to read and write production code in Python, TypeScript, or a similar language and ship fixes directly.
Deep experience securing AWS or another major cloud, including IAM, KMS, networking, containers, and infrastructure as code.
Hands-on application security experience with threat modeling, secure code review, OWASP Top 10, authentication and authorization, and multi-tenant data isolation.
Strong security and systems fundamentals that transfer across tools and vendors.
Experience operating vulnerability management, detection, and incident response in production.
Comfort working directly with enterprise customers on security reviews and architecture discussions.
Good risk judgment, including knowing when to block or unblock and clearly explaining tradeoffs.
Located in or willing to relocate to San Francisco; the role is onsite at the SF headquarters.
Willingness to participate in an on-call rotation for security incidents.

Nice To Haves

Supported a SOC 2 Type II, ISO 27001, or similar audit alongside a compliance team.
Built customer-managed key systems, security log integrations, or single-tenant deployment models.
Experience securing LLM and agent systems, including prompt injection, tool and data access controls, and secure handling of customer data in AI pipelines.
Offensive security or penetration testing background.

Responsibilities

Own Rox’s security program and roadmap and set the standard for secure engineering as the company scales.
Run and tune security tooling across CI, runtime, and testing; triage findings and drive fixes to completion.
Review designs and code for features, agent capabilities, integrations, and public APIs; build guardrails and paved roads that help engineers ship securely by default.
Secure tenant isolation, authentication, authorization, and role-based access control across the agent runtime and customer-facing APIs.
Harden the cloud footprint, including IAM, secrets, network segmentation, encryption at rest and in transit, logging, and detection.
Secure the software supply chain and respond quickly to newly disclosed vulnerabilities and compromised packages.
Design security architecture for enterprise deployment models, including customer-managed keys, security log export, single-tenant deployments, and deployments in customer clouds.
Lead security reviews and participate in calls with enterprise customers and their security teams.
Partner with Compliance on audits, questionnaires, and trust materials, bringing security expertise.
Build and operate incident response, including playbooks, postmortems, and customer communications.
Participate in an on-call rotation for security incidents.
Monitor the threat landscape and translate industry incidents into concrete actions for Rox.

Benefits

Competitive pay with considerable equity upside.
Medical, dental, and vision coverage, including 100% company-paid plans for the employee and eligible dependents.
Company-paid life and AD&D insurance, plus short- and long-term disability.
401(k) with automatic enrollment.
Unlimited PTO, paid sick leave, company holidays, and bereavement leave.
Up to 20 weeks of paid parental leave at 100% pay for birth, adoption, or foster placement.
Wellness stipend of $375 per quarter.
Learning stipend of up to $2,000 per year.
Internet and cell phone stipend of $25 per month.
Mental health support, virtual care, and care navigation.
Fertility and family-building support, plus backup care membership.
Pre-tax commuter benefits for transit and parking.
San Francisco headquarters amenities: daily catered breakfast and lunch, meal allowances, and rideshare support when commuting to the office.