Eve

2 months ago

Lead Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Build and scale Eve’s application and product security program for an AI-native legal platform used by plaintiff law firms. Partner with engineering, infrastructure, and AI teams to secure workflows, strengthen cloud and deployment security, and develop defenses for threats like prompt injection and data exfiltration. Review designs, write code, automate security tooling, and translate emerging AI security tactics into practical roadmap recommendations and incident readiness.

Location: San Mateo

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Build and scale Eve’s application security program across design reviews, threat modeling, code review, vulnerability management, and secure deployment.
•Partner with engineering teams to secure AI-native workflows, including data handling and prompt-injection and model/tool access risks.
•Develop practical defenses for AI-enabled abuse cases such as prompt injection, data exfiltration, unsafe agent behavior, and sensitive legal data exposure.
•Develop internal security tooling and automation (e.g., dependency scanning, secrets detection, access review, abuse detection, security workflow triage).
•Strengthen cloud, infrastructure, and deployment security across identity, permissions, network boundaries, CI/CD, monitoring, and incident response.

Pay and Benefits

Salary: USD 195,000 - 300,000 annually

Perks:Equity401kHealth InsuranceDentalVisionLife InsuranceShort TermLong TermCommuter BenefitsRemote WorkFlexible TimeHolidays

Key Requirements

•5+ years of application security experience, including significant time writing and reviewing code.
•Proficiency in more than one major coding language and comfort contributing directly to the codebase.
•Practical experience securing cloud environments (AWS preferred) and strong cloud security understanding.
•Deep understanding of identity and access management (SAML, OAuth, IAM) and protecting sensitive data at rest and in transit.
•Awareness of AI security tactics (red-team and blue-team) with good judgment translating them into practical product decisions.

Experience:Legal technologyAI-nativeSaaSRegulated/high-trust environments

Skills:OwnershipCuriosityPragmatismSecurity judgmentRoadmap ownership

Languages:English

Tech Stack:AWSCloud securitySAMLOAuthIAMCI/CDKubernetesGCPTypeScriptPythonGoOIDCRBACABACDependency scanningSecrets detectionAccess reviewAbuse detectionAudit loggingData encryption

Company Brief

Eve

Website

Loading job details...

Preparing the role view and application actions.

Eve