About the role

Role Overview

Roboflow is seeking a Senior Security Engineer to treat security as an engineering challenge. You will join the Infrastructure Team and own security across the company’s full stack—from Kubernetes on the cloud to SaaS integrations and application-level logic.

Responsibilities

Own the stack: Secure Kubernetes clusters, cloud infrastructure, SaaS integrations, and developer workflows.
Security vision for the LLM era: Articulate and execute a forward-looking security strategy as LLMs increase leverage for both defenders and attackers.
Engineering for security:
- Build internal tooling and CI/CD automation to catch vulnerabilities before production.
- Implement secure-by-default designs for APIs and deployments.
Threat modeling & secure reviews:
- Lead threat modeling sessions and secure code reviews.
Harden authentication & access control using a first-principles approach across internal/external surfaces.
Red-team & remediation: Proactively probe for vulnerabilities and drive remediation.
Bug bounty ownership: Stand up, launch, manage, and triage the Bug Bounty Program; drive fixes.
Incident response & systemic improvement:
- Investigate vulnerabilities, lead incident response, orchestrate pen testing, and run blameless postmortems that lead to durable changes.
Partner/evangelize: Translate security risks into actionable engineering tasks.

Requirements

6+ years of software/infrastructure engineering experience with a strong security focus.
Deep familiarity with Google Cloud (GCP), Kubernetes, and containerized environments.
Systems thinking across IAM, business logic, and codebase-level weaknesses.
Proven experience responding to real incidents and leading remediation (not purely a “blocker” role).
Thrives in a fast-paced startup (100–300 person) and can prioritize under urgency.

Nice-to-Haves (implied)

Hands-on experience with bug bounty programs, threat modeling, secure code review, and pen testing.
Strong background with Terraform/IaC and modern CI/CD security automation.

About Roboflow

Roboflow is an AI and computer vision platform company that helps developers build and use machine learning models. It provides open-source and hosted tools used by a large developer community across a wide range of industry use cases. The company is backed by prominent investors including Y Combinator and Google Ventures.