Software Engineer, Security
Factory · San Francisco, CA
About this role
## About Factory Our mission is to create a world where software builds and improves itself. We build the platform for self-improving software development, helping the world’s largest enterprise engineering teams turn their organizations into autonomous software factories. Customers including Nvidia, Blackstone, Royal Bank of Canada (RBC), Palo Alto Networks, Adobe, and T-Mobile run Factory to ship code, review PRs, run tests, and deploy continuously—getting smarter with every cycle. In 2026, we raised $200M at a $5B valuation, bringing our total funding to over $400M. We’re backed by world-class investors and operators including Khosla Ventures, Sequoia, Blackstone, Ali Ghodsi (CEO of Databricks), and Frank Slootman (Former CEO of Snowflake). --- ## About the Role Factory is seeking a talented **Security Engineer** to join our team. In this role, you’ll develop and maintain the security foundation of our platform—conducting in-depth code reviews, implementing security best practices, and influencing our overall security strategy. Your expertise in **TypeScript, Python, Kubernetes, CI/CD, and Terraform orchestration** will be crucial in identifying and mitigating potential security vulnerabilities. --- ## What You Will Do - Design, implement, and manage security measures to protect cloud infrastructure, applications, and data—combining preventative controls with rapid response capabilities. - Collaborate with engineering teams to integrate security into the software development lifecycle (secure coding standards, automated security testing, and secure architecture design). - Stay current on security threats, vulnerabilities, and mitigation strategies. - Conduct security code reviews to identify and remediate vulnerabilities. - Develop and implement automated security testing to identify vulnerabilities and risks, recommending and implementing mitigations. - Respond to security incidents and participate in incident response procedures. - Document security processes, procedures, and best practices. - Lead security awareness and training programs to help teams recognize and prevent threats. --- ## Qualifications - **5+ years** of experience as a Security Engineer (product security), with strong background securing cloud environments (**AWS, Azure, GCP**) and understanding **Infrastructure as Code (IaC)** security practices. - Strong coding skills in **TypeScript** and **Python**. - Expertise across security domains (application security, network security, security operations, incident response). - Experience with **container security** (Docker Security, Kubernetes Security). - Familiarity with AWS services including **VPC, EC2, Lambda, Amazon RDS, and S3**. - In-depth knowledge of CI/CD pipeline tools and practices (e.g., **GitHub Actions** or **Jenkins**). - Knowledge of security compliance frameworks and regulations (e.g., **ISO 27001, SOC 2, GDPR**) and experience with security assessments and third-party audits. - Proficiency with security tools/technologies (firewalls, IDS/IPS, vulnerability scanners, WAF, SIEM, encryption solutions). - Demonstrated ability to influence security strategy and drive improvements. --- ## Location **In-office (5 days/week)** in **San Francisco** (walking distance to Caltrain).
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.