{"id":1047889,"url":"https://alion.io/job/assembled-security-engineer","title":"Security Engineer","company":{"id":4653,"name":"Assembled","domain":"assembled.com","url":"https://alion.io/company/assembled","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["New York, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":280000,"currency":"USD","period":"year","gross":null,"usd_annual":280000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"Devin","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Voice Agents","optional":false},{"name":"AWS","optional":true},{"name":"Function Calling","optional":true},{"name":"GDPR","optional":true},{"name":"Go","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"JavaScript","optional":true},{"name":"Karpenter","optional":true},{"name":"Kubernetes","optional":true},{"name":"PCI DSS","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Python","optional":true},{"name":"React.js","optional":true},{"name":"Redis","optional":true},{"name":"Snowflake","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-09-18T20:48:05Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-11-04T04:37:46Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"About Assembled\nAssembled helps companies scale great customer support. As consumers, we’ve all been there. You need help, you’re stuck on hold or going in circles with an AI, and your problem still isn’t solved.\nBehind great support is a complex operational problem: thousands of people and AI agents working across teams, time zones, and products as new problems emerge. Assembled gives support leaders the tools to manage that complexity, from AI agents that resolve customer issues to software that forecasts demand, builds schedules, and makes intraday adjustments.\nMore than 400 companies, including DoorDash, Salesforce, Stripe, and Sephora, trust Assembled. We've raised $71M from NEA, Emergence Capital, Stripe, and Basis Set Ventures and have offices in San Francisco, New York, and London.\nAbout the role\nAssembled operates at the intersection of tens of millions of untrusted customer conversations annually, hundreds of thousands of support professionals, and the sensitive data and privileged access they need to get issues fixed.\nYou'll lead application security across our SaaS and AI products as part of our infrastructure team within Engineering. Working directly with product managers and other engineers, you'll establish our product security practices, influence architecture, and build tooling to manage vulnerabilities from discovery and prioritization through remediation and verification. This is a high-ownership role with broad scope to reshape security at Assembled.\nWhat you'll be responsible for\nProduct and application security. Lead threat modeling, secure design reviews, and vulnerability management across our SaaS and AI products and the underlying infrastructure.\n\nTooling and automation. Integrate and automate controls for secrets, access, and dependency security within our engineering workflows and CI/CD pipelines.\n\nApplication security testing. Establish and maintain code, dependency, and secrets scanning, alongside dynamic application security testing. Partner with third-party penetration testers and manage external vulnerability reporting and triage.\n\nSecure practices. Develop secure design and coding training for engineers. Establish clear processes for routing security issues to engineering owners and following through on fixes.\n\nIncident response. Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements.\n\nPartner on security assurance. Bring technical depth to customer security conversations and partner with Finance/Ops on the technical side of SOC 2 and assurance work. Turn recurring customer needs into better product and engineering decisions.\n\nShape the team and roadmap. You’ll start as our sole dedicated security hire. You’ll set a foundation for how the security function should involve, including where we hire or bring in outside expertise.Turn recurring customer needs into better product and engineering decisions.\n\nExamples of projects you could lead:\nShip adversarial detection for our customer-facing voice agents.\n\nBuild an automated dependency-patching pipeline connected to our AI code generation tools (Devin, Codex, Claude Code, Cursor).\n\nSecure workforce actions like time off and shift swap requests initiated through Slack, calendar, and HRIS integrations.\n\nOur tech stack:\nFrontend: TypeScript, React\n\nBackend: Go, Python\n\nData: PostgreSQL, Redis, Snowflake\n\nCloud and infrastructure: AWS, Kubernetes, Karpenter\n\nLLMs: Claude, GPT, Gemini Flash, and open-source models\n\nAbout you\nSecurity engineering expertise. You have 3+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation.\n\nStrong software engineering fundamentals. You have experience writing and reviewing production code, and knowing when to work alongside the engineer closest to the system.\n\nSee the whole picture. You understand that helping us succeed responsibly means finding ways to build and ship while taking real risks seriously. Engineers trust you to find a path forward and help turn ambitious ideas into products customers can trust.\n\nAI-pilled. You actively use AI tools for security investigation, testing, or remediation and can evaluate their limitations. You have a point of view on how this changes the product threat model and how the security role evolves.\n\nPeople get to this kind of role through many paths. Your background might be in product security, application security, security engineering, DevSecOps, infrastructure, technical consulting, or something less conventional. We care most about how you think and what you have owned.\nNice to have\nBackground with large-scale, multi-tenant SaaS applications handling sensitive customer data\n\nExperience securing AI/ML applications, including prompt injection, unauthorized tool use, and adversarial input protections\n\nFamiliarity with our tech stack (described above)\n\nKnowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS)\n\nExperience as a first or early security hire, or building security practices without a large team or established playbook\n\nWe know great candidates don’t always meet every requirement listed in a job description. If the role excites you and you believe you can make an impact at Assembled, we encourage you to apply. We value diverse perspectives and are committed to building an inclusive workplace where everyone feels like they belong and has the opportunity to do their best work. We look forward to hearing from you!\nFor United States Applicants:\nAssembled participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States.\nFor United Kingdom Applicants:\nAssembled is required to verify your right to work in the UK and will conduct a Right to Work check prior to employment in accordance with applicable law.","description_format":"text","description_chars":5940,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Customer Support & Help Desk Software"],"lifecycle":[{"event":"open","at":"2026-09-18T22:34:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":4,"green_card_filings_12m":1,"median_offered_wage_usd":145000,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.83,"p_room":0.9,"age_days":45,"expected_fill_days":72,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":280000,"is_top_pay":true},"html_url":"https://alion.io/job/assembled-security-engineer","json_url":"https://alion.io/job/assembled-security-engineer.json","meta":{"generated_at":"2026-11-04T04:53:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7550,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4653},"rest":"https://alion.io/mcp/rest/get_company?id=4653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fassembled-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fassembled-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fassembled-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/assembled-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fassembled-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1047889}},{"tool":"search_jobs","arguments":{"company":"assembled.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1047889},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}