Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 186 days ago

Software Engineer, AI Governance

Retool25 open roles

Where
San Francisco
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSoftware Engineer, AI GovernanceRetool · San Francisco

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Retool's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. Retool postings stay open a median of 41 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 186 days ago

Retool median: 41 days open

The posting

WHY WE'RE LOOKING FOR YOU

AI is making it possible for anyone to build software in minutes. But building fast and building safely are two very different things. As development democratizes and more people across an organization create apps, agents, and workflows, the risk surface expands dramatically. The question enterprises are asking isn't "can we build it?" but rather "can we trust what's been built?"

On the AI Governance team, we're solving this problem by building the foundational layer that sits between builders and data. This is the policies, access controls, audit trails, and security infrastructure that make Retool the platform enterprises trust to scale across their entire organization.

Your work will span the stack, from full-stack web development to product infrastructure. You'll focus on the problems that matter most to customers with thousands of employees on Retool: What slows them down? What keeps their security teams up at night? How do we make the right thing easy and the wrong thing hard? This team is responsible for making Retool deeply trusted by our largest customers.

PROJECTS YOU MIGHT WORK ON

Data Access Control Layer: Design and build the system that enforces table-level, column-level, and row-level access controls across Retool's database connectors. You might work on: policy modeling, query rewriting to inject security constraints at the data engine, and building the admin UX that makes complex rules intuitive to configure. The goal: when a builder creates an app, the data security is already handled, automatically. Agentic Governance: When does human authority need to back agent actions? How does this evolve as more parts of day to day work are automated over time? What does an admin need to answer "what's the worst this agent could do?" at a glance? Design & build the primitives that ensure agents are soundly permissioned and observable. Automated Security Center & Admin Control Panel: Build the intelligent layer that proactively keeps Retool secure and well-governed. Surface under-authenticated resources, flag potentially dangerous access patterns, monitor usage analytics and spend, and integrate with compliance and DLP tools so security and admin teams get actionable insights instead of raw data, and Retool gets smarter about protecting customers the more they use it.

THE SKILLSET YOU'LL BRING

2–8 years of professional software engineering experience on high impact teams; ideally some of which has been at startups Experience owning technically challenging, cross-functional projects from start to finish Strong fundamentals across the entire stack, with a strong grasp of backend systems design, data modeling, and building reliable, scalable software You communicate clearly in design docs, code reviews, and cross-functional discussions You care about code quality, testing, and leaving the codebase better than you found it You're motivated by solving real customer problems, not just writing clever code

NICE TO HAVE

Experience building authorization, access control, or security systems Experience with policy engines, query rewriting, or data governance platforms Familiarity with RBAC, ABAC, or relationship-based access control models (Zanzibar, OPA, Cedar) Familiarity with authentication and authorization protocols (OAuth, SAML, SCIM, or similar) Experience designing taming complexity in admin-facing UIs or platform management tools

WHO YOU'LL WORK WITH

You'll join a team that sits at the intersection of security, platform infrastructure, and product experience. You'll work alongside engineers, product managers, and designers who care deeply about making enterprise governance feel effortless rather than burdensome. You'll also partner closely with teams across Retool because governance touches everything.

We're a hard-working, passionate bunch who are motivated by collaboration, strong results, and bringing the impact of Retool to our customers. When we're in the office, we enjoy eating lunch together, and we've been known for our lively game nights. But at the root of it all, we come together to show our customers and not-quite-yet customers how Retool can make them and their companies more efficient and successful.

We're building systems that the largest companies in the world will rely on to keep their data safe and their teams productive. If you want your work to be foundational, the kind of engineering that unlocks everything else, this is the team.

Location: San Francisco, CA

Retool offers generous benefits to all employees and hybrid work location. For more information, please visit the benefits and perks section of our careers page!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Retool's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Retool's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Retool's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.