Security Engineer

About Traversal

Traversal is the AI Site Reliability Engineer (AI SRE) for the enterprise.

Production complexity was already outpacing what engineering teams could manage manually, and AI-generated code is accelerating that gap. Traversal is built for that challenge, autonomously understanding and reasoning across even the largest, most complex production environments to diagnose, fix, and prevent incidents. Our mission is to free engineers from endless firefighting and give them more time to focus on creative, high-impact work.

Today, Traversal operates in mission-critical environments at some of the world’s largest enterprises. Our roots remain deeply embedded in AI research, and we’ve brought together researchers from institutions including MIT, Harvard, Berkeley, Columbia, and Cornell with world-class technical staff and operators from companies like Google, Meta, Datadog, ServiceNow, and Citadel Securities to take on one of the hardest problems for AI to solve.

Traversal is backed by Sequoia Capital, Kleiner Perkins, Hanabi, NFDG, and American Express Ventures.

The Role

As a Security Engineer at Traversal, your mission is to raise the security floor across the company by building AI-native security mechanisms tailored to how we work. This is not a compliance role, and it isn’t about the basics like adding SAST to pipelines.

You’ll partner with our security leadership team to shape the security roadmap across product, cloud, and infrastructure, and you’ll own broad-scope projects within it: designing and shipping the secure foundations Traversal engineers build on, and driving us toward a future where automated verification, not manual code review, decides whether a change is safe to ship. You’ll also build security capabilities directly into Traversal’s products and cloud infrastructure to safeguard our enterprise customers and their data.

Traversal serves Fortune 50 enterprises across multi-tenant environments, BYOC deployments, and several compliance regimes. Your work will span application behavior, identity, infrastructure, deployment boundaries, data security, and access controls, continuously pushing Traversal’s security posture forward.

We welcome strong software and infrastructure engineers who have owned security-critical systems and want to specialize in security. We also welcome experienced security engineers who want to build. Either way, you’ll lead and deliver your area independently. This is a senior, high-impact role: you’ll own foundational security systems end to end. As your scope grows, you’ll also set technical direction across related work streams and build capabilities other teams adopt and extend.

Responsibilities

• Secure Constructs & Paved Paths
• : Design and ship the libraries, defaults, and workflows that make the secure way to build at Traversal the easiest way.
• Security Invariants & Guardrails: Define and implement controls that continuously verify security properties across our products and cloud infrastructure.
• Build Security into Products: Design and ship security capabilities in Traversal’s products that support enterprise security teams.
• Findings to Fixes: Discover issues, verify them, assess them, ship fixes with system owners, and add tests or controls that prevent recurrence.
• Security Architecture: Architect security systems and major components, defining the interfaces, invariants, and evolution paths that let them scale across SaaS and BYOC deployments.
• Delivery & Adoption: Lead multi-phase rollouts, migrations, and deprecations across teams with careful sequencing and de-risking, and land them with enablement and measurable success criteria.
• Operational Ownership: Ship operationally complete systems with monitoring, alert quality, runbooks, and safe rollout and upgrade paths; debug and resolve security issues in your area.
• Technical Direction: Set direction for scoped security domains, connect technical work to customer and business outcomes, and use results to shape the follow-up roadmap with product and engineering leadership.
• Mentorship & Leverage: Mentor engineers and emerging technical leaders, and create patterns, libraries, and reference implementations that let others extend your work without depending on you.

Requirements

• 4-6+ years building or securing production software or infrastructure at technically rigorous companies or teams, including sensitive, mission-critical systems.
• Proven ability to independently lead ambiguous, cross-team security projects from design through implementation, migration, and adoption, with minimal structure.
• Strong programming skills in a language such as Python, Rust, or Go and the ability to work effectively in an existing codebase.
• Hands-on depth in application security or cloud security, with working knowledge of the other, gained either in a security role or by owning security-critical systems as a software or infrastructure engineer.
• Technical depth in risk assessment. Looks at standards like NIST & SOC2 as a starting point, and not necessarily the right baseline.
• Practical understanding of authentication, authorization, trust boundaries, secrets, and common failure modes in distributed systems.
• Clear written communication and a collaborative approach to technical disagreements.
• Nice to Have
• Experience with enterprise customer security requirements.
• Experience building on and securing infrastructure-as-code (e.g., Terraform) and container orchestration systems (e.g., Kubernetes).
• Detection engineering, security telemetry, or automated control validation.
• Offensive testing experience paired with shipped remediations.
• Experience with applying formal methods for security.
• You don’t need experience in every area above. We’re interested in what you’ve built, how you made decisions, and how your work changed the systems and teams around you.