Staff Security Engineer I

Role overview

Staff Security Engineer (technical security leader) responsible for designing and implementing security architectures that protect EDB’s products, infrastructure, and customers. The role partners closely with engineering to build secure software, lead cross-functional security initiatives, and grow toward broader InfoSec leadership.

Responsibilities

• Lead cross-functional application security initiatives to identify, prioritize, and mitigate security risks across EDB products.
• Build and review code for security automation and tooling that enables the InfoSec organization to detect, respond, and remediate faster.
• Build and orchestrate security agents using AI/LLM-driven tooling (e.g., LangChain) to automate:
  • threat modeling
  • alert triaging
  • code analysis
• Partner with internal teams to add security guardrails for internal AI applications, including:
  • prompt injection mitigation
  • data leakage prevention
  • secure architectures
• Integrate AI tools into the SDLC for automated architectural risk assessments, security reviews, and vulnerability identification in generated code/toolsets.
• Design and integrate security architectures across cloud and on-prem environments to strengthen defense against advanced threats.
• Lead vulnerability disclosure investigations and coordinate with engineering to assess impact, validate findings, and drive remediation.
• Embed security into the software development lifecycle via secure design reviews, code review, and threat modeling.
• Deliver security solutions as Minimum Valuable Products (start small, iterate) with clear guidance to engineering teams.

Requirements

• Developer-centric background (able to write/review code to build security automation and tooling).
• Strong technical leadership in application security and security architecture.
• Experience partnering with engineering/product teams and embedding security in the SDLC.

Nice-to-haves / implied focus areas

• AI security experience: guardrails for AI apps, prompt injection mitigation, data leakage prevention.
• Building LLM-based security agents and integrating them into SDLC workflows (LangChain referenced).