Skip to content

Open nowPosted 2 days ago

Senior Security Engineer, AI Security

Dropbox38 open roles

Pay
$214,200 – $289,800 a year
Where
Remote - US: Select locations
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Engineer, AI SecurityDropbox · Remote - US: Select locations
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Dropbox's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. Dropbox postings stay open a median of 33 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 2 days ago

Dropbox median: 33 days open

The posting

Role Description

Security Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration.

In this role, you’ll help shape how Dropbox secures AI systems and agentic workflows, building and operating the controls that protect the infrastructure, tools, and data they rely on. You’ll tackle challenges such as prompt injection, secure agent access, and MCP integrations, turning emerging risks into practical, reusable safeguards. Partnering across engineering and security, you’ll lead hands-on work that enables teams to adopt AI safely while protecting customer data.

Our Engineering Career Framework is viewable by anyone outside the company and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.

Responsibilities

  • Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and data stores.
  • Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors
  • Lead security implementation for secure usage of AI tools and governance.
  • Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
  • Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms and recommendations.
  • Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructure.
  • Collaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security posture.

Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.

Requirements

  • 8+ years of Security Experience, demonstrating impactful contributions to security strategies.
  • Experience in securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI supply-chain risk.
  • Experience in designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider equivalents.
  • Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
  • Experience with agentic frameworks and MCP tool integration.
  • Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
  • Proficiency using one or more scripting or high-level languages to automate tasks, manipulate data, or build small systems e.g. Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, Java
  • Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiency.

Preferred Qualifications

  • Experience securing MCP-based systems or similar AI agent and tool protocols.
  • Experience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakers.
  • Familiarity with NIST AI RMF, NIST SP 800-218A, OWASP LLM and agentic security guidance.
  • Experience in Kubernetes and container security.
  • Experience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM or SOAR.
  • Certifications such as CISSP, CISM, or equivalent.
  • Involvement in security community activities, conferences, or publications.

Durable Skills

AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:

  • Awareness: Understand yourself and others.
  • Judgment: Evaluate information and make decisions in complex situations.
  • Adaptability: Learn, adjust, and stay effective through change.
  • Connection: Communicate, collaborate, and build trust.

To learn more about why these skills matter and what the data shows about thriving through change, read this blog post from our Chief People Officer, Melanie Rosenwasser.

Compensation

US Zone 1

This role is not available in Zone 1

US Zone 2

$214,200—$289,800 USD

US Zone 3

$190,400—$257,600 USD

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Dropbox's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Dropbox's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Dropbox's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.