Software Engineer, Security

About Sierra

Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia.

Software Engineer, Security

Security Engineering builds the foundations that let Sierra deliver powerful AI agents while protecting customer data and trust. We partner across product and platform to make security, privacy, and safety core product capabilities and secure defaults.

What You'll Do

• Build the Foundations of Trust: Design and ship systems that make Sierra’s platform secure by default — spanning agent safety/security, privacy, identity, authentication, authorization, and data security across all layers of production (agents, infrastructure, backend, frontend).
• Own Cross-Cutting Systems: Partner with product and platform teams to implement and evolve Sierra’s trust primitives: identity management, access control, auditability, and data lifecycle management, making pragmatic design trade-offs.
• Secure Agentic AI Systems: Build controls that ensure AI agents can't leak customer data, execute unauthorized actions, or be manipulated into unintended behavior. Design runtime policy enforcement for tool use, implement safe agent sandboxing, and protect data boundaries.
• Automate and Scale Security-Adjacent Workflows: Create developer-friendly tooling to reduce risk and friction through automated security checks in CI/CD, schema validation for privacy boundaries, and runtime monitoring for sensitive events.

What You'll Bring

• Strong Software Engineering Skills: Experience building and maintaining production systems, designing APIs, integrating with authentication or identity frameworks, and leveraging AI-assisted development tools.
• Security Mindset: Consideration of data flows, storage, access control, least privilege, and transparency.
• Product and Platform Mindset: Focus on building secure, scalable systems that enable fast innovation without sacrificing trust.
• Curiosity and Ownership: Ability to take ambiguous, cross-cutting problems from first principles to production and own solutions end-to-end.

Even Better If

• Experience with privacy, identity, trust & safety, authN/authz, or data protection systems.
• Experience building security frameworks, libraries, or tooling for developers, or integrating security automation into CI/CD pipelines.
• Exposure to AI systems or interest in designing secure-by-default LLM applications.
• An attacker mindset with experience identifying or resolving security vulnerabilities in production systems.
• Thriving in 0→1 environments balancing speed, reliability, and trust.