{"id":646358,"url":"https://alion.io/job/c1-sr-security-engineer","title":"Sr. Security Engineer","company":{"id":11182,"name":"C1","domain":"c1.ai","url":"https://alion.io/company/c1","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":70,"open_postings":12,"ghost_share":0.5,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","New York, United States","Portland, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"DigitalOcean","optional":false},{"name":"ISO 27001","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zscaler","optional":false},{"name":"Cilium","optional":true},{"name":"Consul","optional":true},{"name":"Envoy","optional":true},{"name":"Istio","optional":true},{"name":"Kubernetes","optional":true},{"name":"PKI","optional":true},{"name":"Service Mesh","optional":true}],"status":"live","first_seen_at":"2026-09-09T15:10:25Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-30T11:52:01Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":49},"description":"C1 is the first AI-native identity security platform that protects every identity: human, non-human, and AI. With powerful automation, platform-level AI, and out-of-the-box connectors, it centralizes access visibility, enforces fine-grained controls, enables just-in-time access, and automates user access reviews across all apps. It's easy to use, quick to deploy, and trusted by enterprises like DigitalOcean, Instacart, Ramp, and Zscaler.\nThe Role\nWe're hiring a Senior Security Engineer to join a small, early-stage security team with a broad remit - spanning security engineering, application and cloud security, and compliance. This is a generalist role: you'll have the opportunity to go deep in one domain over time while staying hands-on and supportive across others. Our stack is primarily Go and AWS.\nLittle of this job is manual. Instead of hand-reviewing every ticket, spec, or deploy, you'll spend your time building the purpose-built agents and skills that do that work continuously, and using them to orchestrate security into the development lifecycle through a risk-based approach. Our goal is to bake security into design specs up front, not catch it in post-deploy review.\nYou don't just want to hand engineering teams a list of findings - you want to roll up your sleeves and help implement the fix. You care about solving problems systemically, not just patching individual instances, and you want your work to make it easier for everyone at the company to build securely by default.\nWhat You'll Do\nDefine and drive security standards and secure-by-default solutions, serving as a subject matter expert for application and/or cloud security.\n\nBuild purpose-built agents and skills that orchestrate security into the development lifecycle through a risk-based approach, automating the manual, repetitive work (triage, enrichment, review) so the team can focus on judgment calls, not queues.\n\nShift security left by baking risk-based review into design specs and architecture decisions, rather than relying on post-deploy audits to catch issues.\n\nBuild security tooling and automation that scales security practices across engineering, and help implement meaningful, actionable security observability and detection signals.\n\nLead threat modeling and risk assessment for high-risk features and platform changes.\n\nAssess and help mitigate security risks introduced by agentic development practices and AI-powered product features running in production.\n\nPartner with engineering teams to prioritize and remediate critical threats, help define API security standards, and conduct security code reviews.\n\nContinuously explore and adopt open-source tools to assess the security of and test our services, rather than defaulting to manual review.\n\nIdentify systemic security risks and lead multi-team remediation efforts end-to-end, not just the initial recommendation.\n\nPartner across security, compliance, and engineering on cross-domain problems - be a go-to point of contact when a hard security question needs clarity.\n\nContribute to compliance and trust initiatives (e.g., SOC 2, ISO 27001/42001) as they intersect with your area of focus.\n\nInvest in the growth of teammates and in raising the security bar across the broader engineering org.\n\nWhat We're Looking For\nProven experience securing enterprise SaaS applications, including authentication flows, authorization patterns, and input validation at API boundaries.\n\nDemonstrated experience securing deployment and change-management mechanisms for software and infrastructure.\n\nBackground in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security, or Application Security.\n\nHands-on code review experience, ideally in Go, Python, or Rust.\n\nExperience with AWS (or another major cloud provider) and comfort working across cloud infrastructure.\n\nComfortable working both independently and collaboratively in a fast-paced, high-growth environment.\n\nCurious and current on modern security practices, tooling, and emerging threats, including how AI is changing the threat landscape.\n\nSomeone to participate quarterly in-person in one of our primary offices San Francisco, or Portland Oregon. \n\nShow Us Your Agent Work\nThis role expects real, hands-on experience building agents and automation for security, so we ask candidates to show it rather than just claim it. As part of the process, be ready to share one or more of the following:\nA project, demo, or repo where you built an agent, skill, or automation that replaced manual security work (triage, review, detection, etc.).\n\nExamples of how you use AI coding tools or agentic workflows in your day-to-day work.\n\nA short walkthrough - live or recorded - of a security automation you shipped, including the problem, your approach, and the impact.\n\nWe care about practical results and good judgment in where (and where not) to apply automation, not just familiarity with the latest tools.\nNice to Have\nExperience with Kubernetes, service mesh, or PKI/network technologies (Consul, Envoy, Cilium, Vault, Istio, etc.).\n\nExperience building or extending internal security tooling, automations, or agents.\n\nPrior experience at a high-growth SaaS or identity/access management company.\n\nWhy This Role\nThis is a high-leverage role on a small, early-stage security team: your scope will be broad, your ownership will be real, and the systems you build will shape how a security-first company secures its own products and development lifecycle. You'll have the chance to specialize in the domain you care most about while still touching the full breadth of the security program.\nCompensation & Benefits\nC1 offers a competitive salary, meaningful equity, and comprehensive health benefits. Specific compensation will be commensurate with experience.\nConductorOne, Inc. is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.","description_format":"text","description_chars":6172,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Security Operations","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-09-10T20:15:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":127500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.469,"p_room":0.55,"age_days":50,"expected_fill_days":36,"reasons":["conf:2","stale_co","win:tail"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/c1-sr-security-engineer","json_url":"https://alion.io/job/c1-sr-security-engineer.json","meta":{"generated_at":"2026-10-30T15:22:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3111,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11182},"rest":"https://alion.io/mcp/rest/get_company?id=11182"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fc1-sr-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fc1-sr-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fc1-sr-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/c1-sr-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fc1-sr-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":646358}},{"tool":"search_jobs","arguments":{"company":"c1.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":646358},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}