> Markdown version of [/jobs/ext/4011971-security-engineer](https://www.wearedevelopers.com/jobs/ext/4011971-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Cognition AI, Inc.
- **Location:** San Francisco, CA, United States
- **Salary:** $260,000.0 - $300,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Programming, Programming Tools, Integrated Development Environments, Python (Programming Language), Key Management, Web Application Security, Software Engineering, Software Vulnerability Management, Web Applications, Multi-Agent Systems, Software Security, Kubernetes, Information Technology, Codebase, Data Management
- **Published:** October 29, 2026
- **Apply:** https://www.careerbuilder.com/job-details/security-engineer-san-francisco-ca--e0a165ac-b1da-4700-a315-89c130d91149

## About the Role

IDE (Integrated Development Environment), Software Engineering, Artificial Intelligence (AI), Computer Programming, Programming Tools, Threat Modeling, Computer Security, Security Attacks, Machine Tool, Identity Data Management, * Deep security engineering: Hands-on experience across product security, infrastructure security, and detection and response.

 * Strong software engineering fundamentals: Security at Cognition means writing real code; proficiency in Python, Rust, Go, and comfort owning complex systems codebases.
 * Cloud security expertise: Practical experience securing Kubernetes, cloud platforms (AWS, GCP, or Azure), and multi-tenant compute environments.
 * Web security expertise: Hands-on experience hardening complex, modern web applications.
 * Threat modeling and adversarial thinking: You can look at a system and quickly identify how it breaks; you think like an attacker and design like a defender.
 * Incident response: Calm, methodical, and effective under pressure; experience leading incidents end to end and driving the fixes that follow.
 * Comfort with novel problem spaces: You are excited rather than intimidated by the security challenges unique to autonomous agents and AI-native developer tools.
 * Relevant industry experience: Prior experience at a frontier AI lab, applied AI company, or developer tools company. You know what good looks like in this category.
 * Degree from a top-tier university: BS, MS, or equivalent in Computer Science, Mathematics, Engineering, or a related technical discipline from a highly selective program.

## Description

* Secure the agent execution surface: Design and harden the sandboxing, isolation, and runtime controls that let Devin safely execute untrusted code and use tools across long-horizon tasks.
 * Own product and infrastructure security: Lead threat modeling, secure design reviews, and vulnerability management across Devin, Windsurf, and the underlying infrastructure they run on.
 * Build security tooling that engineers actually use: Create internal systems for secrets management, identity and access, dependency security, and detection that integrate naturally into how the team ships.
 * Lead incident response and detection: Build the detection pipeline, run incident response, and turn every event into systemic improvements.
 * Drive customer trust: Partner with go-to-market and legal teams to support compliance and customer trust initiatives. Build the controls that customers expect from a tool deeply embedded in their engineering workflow.