Senior Security Engineer

📋 Description

• Own product & platform security for LangSmith, LangGraph, and SDK (Python/TS/Go).
• Secure-by-default authN/Z: SSO/SAML/OIDC/SCIM, token lifecycles.
• Vuln management: scanning, triage, patch SLAs; coordinate with engineering.
• Ship secure designs, reviews, and lightweight checks (linters, SBOM, SLSA).
• Hardening & operations: network segmentation, Zero Trust, Kubernetes posture, IAM least privilege.
• Collaborate with engineers and customers on security requirements.

🎯 Requirements

• 5+ years in security engineering with Python or Go; TypeScript a plus.
• Cloud/Kubernetes security (GCP/AWS IAM, workload identity, policies).
• Hands-on AppSec: code review, threat modeling, secure design.
• Incident management: detection, response, remediation.
• Supply-chain security: SBOM, sigstore/cosign, SLSA controls.
• Clear, pragmatic communication with engineers and customers.

🎁 Benefits

• Security for SaaS + self-hosted offerings, including air-gapped deployments.
• Proficiency with AI tooling to expedite security reviews.
• Solid understanding of AI threats and adversarial testing.
• SOC 2 / ISO 27001 programs and evidence automation.
• Go services and IaC (Terraform/Helm); policy-as-code.
• Privacy patterns: data minimization, retention, masking.