Member of Technical Staff - Workforce Security

Required

• Strong experience in identity and access security and endpoint security. Hands-on experience administering an identity provider and a device-management platform.
• Practical understanding of OAuth, OIDC, SAML, secrets handling, and authorization design. You can trace how an application obtains and uses credentials and find where access controls can be bypassed.
• Hands-on engineering ability. You can read unfamiliar code, inspect how an app talks to APIs, and write the automation and tooling that replace manual processes.
• Experience using LLMs and agents in your own work, along with a clear-eyed view of where they help, where they don't, and how they can be attacked or misused.
• Good security judgment. You can distinguish meaningful risks from theoretical ones and apply controls in proportion to the risk.
• Experience supporting researchers, engineers, or other highly technical staff, and a track record of finding secure ways to meet their needs.
• Comfort working with real autonomy and turning loosely defined problems into concrete improvements.
• Experience with macOS security, developer tooling, SaaS security, software distribution, agent integrations, or threat hunting would be particularly relevant, but none is a prerequisite. We're more interested in people who have solved difficult security problems for real users than in candidates who can check every box on a technology list.
• How We Work Together
• We’re a distributed team with real offices that people actually use. This role is based in San Francisco, and you’ll join us in the office at least 2 days a week, or one full week every other week.
• Everything we do is grounded in four values:
• Obsessed. We are a frontier research lab. The science has to be right, the understanding deep, the product beautiful.