Staff Security Engineer at Rox Data Corp | CA, US | Rezi

Staff Security Engineer at Rox Data Corp

Staff Security Engineer

Rox Data Corp · CA, US

1 weeks ago

Staff Security Engineer

Rox Data Corp · CA, US

11 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Staff Security Engineer role.

Rezi rewrites your resume against Rox Data Corp's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Staff Security Engineer posting at Rox Data Corp — free, in seconds.

About the Role

As a Staff Security Engineer at Rox, you will own security end-to-end across product, application, cloud, and infrastructure security, as well as the security aspects of enterprise customer engagements. You will be a key technical leader, identifying and rectifying engineering anti-patterns, and effectively communicating security risks to various stakeholders.

Responsibilities

  • Own Rox’s security program and roadmap, setting the standard for secure engineering as the company scales.
  • Manage and optimize security tooling across CI, runtime, and testing environments, triaging findings and driving resolutions.
  • Review designs and code for new features, agent capabilities, integrations, and public APIs, establishing guardrails for secure development.
  • Implement security measures for tenant isolation, authentication, authorization, and role-based access control across agent runtime and customer-facing APIs.
  • Harden the cloud infrastructure, focusing on IAM, secrets management, network segmentation, encryption, logging, and detection.
  • Secure the software supply chain and respond rapidly to newly disclosed vulnerabilities and compromised packages.
  • Design security architecture for enterprise deployment models, including customer-managed keys, security log export, single tenant, and deployments in customer clouds.
  • Serve as the primary security contact for customers, leading security reviews and engaging with enterprise security teams.
  • Collaborate with the Compliance team on audits, questionnaires, and trust materials, providing deep security expertise.
  • Develop and manage incident response processes, including playbooks, postmortems, and customer communications.
  • Participate in an on-call rotation for security incidents.
  • Monitor the threat landscape and translate industry incidents into actionable security measures for Rox.

Requirements

  • 10+ years of experience in security engineering, application security, or infrastructure engineering with a security focus, including Staff-level scope.
  • Strong software engineering skills, including the ability to read, write, and ship production code (Python, TypeScript, or similar).
  • Deep experience securing major cloud platforms like AWS, including IAM, KMS, networking, containers, and infrastructure as code.
  • Hands-on application security experience, including threat modeling, secure code review, OWASP Top 10, authentication, authorization, and multi-tenant data isolation.
  • Proficiency in security and systems fundamentals applicable across various tools and vendors.
  • Experience managing vulnerability management, detection, and incident response in production environments.
  • Comfort engaging directly with enterprise customers on security reviews and architecture discussions.
  • Excellent judgment regarding risk, with the ability to clearly articulate tradeoffs and make informed decisions on blocking or unblocking progress.
  • Must be located in or willing to relocate to San Francisco for onsite work at the SF HQ.

Skills

  • Security Engineering
  • Application Security
  • Infrastructure Engineering
  • Cloud Security (AWS)
  • IAM
  • KMS
  • Networking
  • Containers
  • Infrastructure as Code
  • Threat Modeling
  • Secure Code Review
  • OWASP Top 10
  • Authentication (AuthN)
  • Authorization (AuthZ)
  • Multi-tenant Data Isolation
  • Vulnerability Management
  • Detection and Response
  • Incident Response
  • Python
  • TypeScript
  • Enterprise Customer Engagement
  • Risk Assessment
  • SOC 2 Type II
  • ISO 27001
  • Customer-Managed Keys
  • Security Log Integrations
  • Single Tenant Deployment Models
  • LLM Security
  • Agent System Security
  • Prompt Injection
  • Tool and Data Access Controls
  • Offensive Security
  • Penetration Testing

Location

  • San Francisco, CA
  • Onsite

Work Type

  • Onsite
  • Full-time

Experience Level

  • Staff level

Benefits

  • Competitive pay with considerable equity upside
  • Medical, dental, and vision insurance (100% company-paid plans for employee and dependents)
  • Company-paid life & AD&D insurance
  • Company-paid short- and long-term disability insurance
  • 401(k) with automatic enrollment
  • Unlimited Paid Time Off (PTO)
  • Paid sick leave
  • Company holidays
  • Bereavement leave
  • Up to 20 weeks of paid parental leave at 100% pay
  • $375/quarter wellness stipend
  • Up to $2,000/year learning stipend
  • $25/month internet & cell phone stipend
  • Mental health support, virtual care, and care navigation
  • Fertility & family-building support
  • Backup care membership
  • Pre-tax commuter benefits (transit & parking)
  • Daily catered breakfast & lunch at SF HQ
  • Meal allowances at SF HQ
  • Rideshare support for commuting to SF HQ

About the Company

  • Rox empowers sellers with autonomous revenue agents to automate manual tasks, enabling them to focus on selling.
  • The company is reimagining the revenue stack by building the world's first revenue operating system.
  • Rox's platform allows humans to evolve into orchestrators while agents manage the end-to-end customer lifecycle.
  • Rox serves Global 2000 leaders in banking, hardware, construction, and sovereign AI, including companies like Ramp and Cognition.
  • The team is composed of individuals who have founded and exited companies, held senior positions at major tech firms, and achieved recognition in competitive fields.
  • Rox is backed by prominent investors such as Sequoia, General Catalyst, Google Ventures, Elad Gil, and Chris Ré.