Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Engineer role.
Rezi rewrites your resume against Assembled's job description. Free.
Tailor your resume to this Security Engineer role.
Rezi rewrites your resume against Assembled's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer posting at Assembled — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Engineer posting at Assembled — free, in seconds.
About the Role
Lead application security across Assembled's SaaS and AI products, establishing security practices, influencing architecture, and building tooling to manage vulnerabilities. This is a high-ownership role with broad scope to reshape security at Assembled.
Responsibilities
- Lead threat modeling, secure design reviews, and vulnerability management across SaaS and AI products and underlying infrastructure.
- Integrate and automate controls for secrets, access, and dependency security within engineering workflows and CI/CD pipelines.
- Establish and maintain code, dependency, and secrets scanning, alongside dynamic application security testing.
- Partner with third-party penetration testers and manage external vulnerability reporting and triage.
- Develop secure design and coding training for engineers.
- Establish clear processes for routing security issues to engineering owners and following through on fixes.
- Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements.
- Bring technical depth to customer security conversations and partner with Finance/Ops on the technical side of SOC 2 and assurance work.
- Turn recurring customer needs into better product and engineering decisions.
Requirements
- 5+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation.
- Experience writing and reviewing production code in a complex codebase.
- Understanding of the tradeoff between security and shipping velocity.
- Experience operating in programs that preserved speed or ability to speak to why past programs destroyed it.
- Ability to evaluate AI tools' limitations.
- Ability to evaluate how AI changes product threat models and evolves the security role.
- Background with large-scale, multi-tenant SaaS applications handling sensitive customer data.
- Experience securing AI/ML applications, including prompt injection, unauthorized tool use, and adversarial input protections.
- Familiarity with the tech stack.
- Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
- Experience as a first or early security hire, or building security practices without a large team or established playbook.
Skills
- Application Security
- Threat Modeling
- Security Code Reviews
- Vulnerability Remediation
- Software Engineering
- Risk Judgment
- AI Tools for Security
- DevSecOps
- Infrastructure Security
- Technical Consulting
- TypeScript
- React
- Go
- Python
- AWS
- Kubernetes
- AI/ML Security
- Prompt Injection
- Unauthorized Tool Use
- Adversarial Input Protections
- SOC 2
- ISO 27001
- GDPR
- HIPAA
- PCI DSS
Location
- San Francisco
- New York
- London
Work Type
- Full-time
Experience Level
- 5+ years of hands-on application security experience
About the Company
- Assembled helps companies scale great customer support.
- Assembled gives support leaders the tools to manage complexity, from AI agents that resolve customer issues to software that forecasts demand, builds schedules, and makes intraday adjustments.
- More than 400 companies, including DoorDash, Salesforce, Stripe, and Sephora, trust Assembled.
- Raised $71M from NEA, Emergence Capital, Stripe, and Basis Set Ventures.
- Offices in San Francisco, New York, and London.
Equal Opportunity
- We value diverse perspectives and are committed to building an inclusive workplace where everyone feels like they belong and has the opportunity to do their best work.
- Assembled participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States.
- Assembled is required to verify your right to work in the UK and will conduct a Right to Work check prior to employment in accordance with applicable law.