Staff Security Engineer

Members on our team have:

• Founded and exited successful companies

• Won IMO and IOI gold medals

• Published field-defining papers

Core Principles

Your Role

Rox agents read and act on our customers’ most sensitive revenue data. Security is a core part of how we win and keep enterprise trust.

As a Staff Security Engineer, you will own security end to end across product and application security, cloud and infrastructure security, and the security side of enterprise customer work. You will be one of our strongest engineers: someone who hunts down engineering anti-patterns, fixes them in code, and explains the “so what” of security risk to engineers, executives, and customers.

You will report to the VP of Engineering for starters, and work closely with Platform, Foundations, Forward Deployed Engineering, and our GTM team on enterprise deals.

Responsibilities

• Own Rox’s security program and roadmap, and set the bar for secure engineering as we scale.

• Run and tune security tooling across CI, runtime, and testing. Triage findings and drive fixes to closure.

• Review designs and code for new features, agent capabilities, integrations, and public APIs. Build guardrails and paved roads so engineers ship securely by default.

• Secure tenant isolation, AuthN, AuthZ, and RBAC across our agent runtime and customer-facing APIs.

• Harden our cloud footprint: IAM, secrets, network segmentation, encryption at rest and in transit, logging, and detection.

• Secure our software supply chain, and respond fast to newly disclosed vulnerabilities and compromised packages.

• Design the security architecture for enterprise deployment models, including customer-managed keys, security log export, single tenant, and deployments in customer clouds.

• Be the security voice with customers: lead security reviews and join calls with enterprise security teams.

• Partner with Compliance on audits, questionnaires, and trust materials. Security and compliance are different jobs, and you bring the security depth.

• Build and run incident response: playbooks, postmortems, and customer communication.

• Take part in an on-call rotation for security incidents. Security is 24/7, and we want to be upfront about that.

• Monitor the threat landscape and turn industry incidents into concrete actions for Rox.

Qualifications

• 10+ years in security engineering, application security, or infrastructure engineering with a strong security focus, including time operating at Staff level scope.

• Strong software engineering skills. You read and write production code (Python, TypeScript, or similar) and ship fixes yourself.

• Deep experience securing AWS or another major cloud: IAM, KMS, networking, containers, and infrastructure as code.

• Hands-on application security experience: threat modeling, secure code review, OWASP Top 10, AuthN and AuthZ, and multi-tenant data isolation.

• Depth in security and systems fundamentals that carries across any tool or vendor.

• Experience running vulnerability management, detection, and incident response in production.

• Comfort working directly with enterprise customers on security reviews and architecture discussions.

• Good judgment about risk. You know when to block and when to unblock, and you explain tradeoffs clearly.

• Be located in or willing to relocate to San Francisco. This role is onsite at our SF HQ.

Nice to haves

• Supported a SOC 2 Type II, ISO 27001, or similar audit alongside a compliance team.

• Built customer-managed key systems, security log integrations, or single tenant deployment models.

• Experience securing LLM and agent systems: prompt injection, tool and data access controls, and secure handling of customer data in AI pipelines.

• Offensive security or penetration testing background.

Benefits

• Competitive pay with considerable equity upside

• 401(k) with automatic enrollment

• Wellness stipend: $375/quarter

• Learning stipend: up to $2,000/year

• Internet & cell phone stipend: $25/month

• Pre-tax commuter benefits (transit & parking)