Senior Security Engineer, Product & Platform
First seen by Alion on Nov 14, 2026.
This a Full Remote job, the offer is available from: United States, California (USA)
Who is Recruiting from Scratch:
Recruiting from Scratch is a specialized talent firm dedicated to helping companies build exceptional teams. We partner closely with our clients to deeply understand their needs, then connect them with top-tier candidates who are not only highly skilled but also the right fit for the company’s culture and vision. Our mission is simple: place the best people in the right roles to drive long-term success for both clients and candidates.
https://www.recruitingfromscratch.com/
We are the world’s most popular AI Gateway, trusted by companies like Adobe, Netflix, and NASA. We’ve grown ARR 6x in the last year to nearly $30M with a team of 20, and developers use us to call 100+ LLM providers through one API.
We’re looking for a Senior Security Operations / Detection Engineer to build and own detection and response across our infrastructure.
About the role
This is a hands-on individual contributor role reporting to our security lead. You’ll work directly with engineers to review and harden our Python codebase, secure releases, and make security part of how we build. San Francisco is preferred, but not required.
You’ll own your roadmap, implement improvements yourself, and make day-to-day decisions independently. You should be comfortable prioritizing competing risks and explaining the tradeoffs behind your decisions.
The ideal candidate has built and owned a product, platform, or infrastructure security program and knows how to turn security findings into lasting engineering improvements.
Responsibilities
Review and harden our Python codebase, fixing vulnerabilities and addressing their underlying causes.
Review sensitive pull requests and architecture changes before they reach production.
Harden our build and release pipeline, including GitHub Actions permissions, workload identity, signing, and credential handling.
Build and maintain automated controls for secrets detection, credential management, and software release integrity.
Review cloud architecture, IAM, secrets management, and workload identity, and implement security improvements.
Build guardrails and secure defaults that fit how engineers work.
Document our security architecture, decisions, and operating practices.
Own delivery and ongoing maintenance of product and pipeline security improvements.
What we’re looking for
7+ years of relevant experience, including independent ownership of a security scope.
Experience hardening a production CI/CD pipeline, including GitHub Actions permissions and keyless signing.
Strong knowledge of a major cloud provider, preferably AWS, including IAM, secrets management, and workload identity.
Familiarity with Terraform.
Ability to read production Python web-service code, identify vulnerabilities, and implement fixes.
Experience building security tooling and guardrails that engineering teams adopted.
Strong judgment about prioritization and risk when several problems need attention at once.
Excellent written and verbal communication, including the ability to coordinate across time zones independently.
Bonus points
Experience as the first or second security hire at a developer-tools or open-source company.
A background in software, platform, or infrastructure engineering.
Experience leading platform or infrastructure security, defining roadmaps, and owning the security of releases.
Why join Us?
Secure an open-source product, its infrastructure, and its software delivery pipeline.
Work directly with engineers and influence how software gets designed and shipped.
Set priorities and implement the improvements you recommend.
Build security practices that become part of everyday engineering work.
About Us
We are the world's most widely adopted AI Gateway. We provide a unified API for 100+ LLM providers along with routing, authentication, budgets, observability, and governance for production AI systems. Thousands of companies rely on us to power AI in production.
If you want to lead the team that keeps us ahead of every model launch, we'd love to meet you.
Onsite in SF or Remote.
Compensation: $220-280k base + equity + benefits.