Principal Security Software Engineer (Application Security)

TL;DR

Principal Security Software Engineer (Application Security): Leading company-wide security initiatives and defining the technical vision for scaling application security practices with an accent on secure autonomous agentic workflows and product security. Focus on remediating critical vulnerabilities, automating security efforts, and implementing Trust-by-Design principles across diverse tech stacks.

Location: Hybrid: Onsite Tuesday, Wednesday, and Thursday in San Mateo, CA

Company

A global platform empowering a community of developers to create immersive 3D experiences.

What you will do

• Drive company-wide security initiatives to address critical vulnerabilities across diverse tech stacks.
• Define and evolve the technical vision for scaling application security practices across the organization.
• Design and secure autonomous agentic workflows and define safe AI adoption strategies at scale.
• Partner with engineering leaders to implement security solutions aligned with Trust-by-Design principles.
• Perform application code testing following the OWASP Testing Methodology.
• Mentor and guide other security engineers to foster technical growth.

Requirements

• 8+ years of professional experience in cybersecurity, specializing in application security, data encryption, and cloud security.
• Proficiency in Python, Golang, or C#, along with scripting languages like Bash.
• Deep knowledge of cryptography, PKI, TLS, and practical implementations.
• Experience with threat modeling and Secure Software Development Life Cycles (SSDLC).
• Must have United States work authorization (note: some visa categories may not be supported).
• Familiarity with secure deployment patterns for AI agents, including sandboxing and microVMs.

Culture & Benefits

• Hybrid work model with mandatory onsite days (Tue-Thu) and optional presence on Mon/Fri.
• Equity compensation and comprehensive benefits for all full-time employees.
• Commitment to equal employment opportunities and an inclusive workplace.
• Focus on sustainable, long-term security improvements over quick fixes.