Skip to content

Open nowPosted 69 days ago

Security Engineer

Town16 open roles

Pay
$250,000 – $300,000 a year
Where
San Francisco
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity EngineerTown · San Francisco
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Town's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Town postings stay open a median of 61 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 69 days ago

Town median: 61 days open

The posting

ABOUT TOWN

Town is building the AI coworker for every team. Everyone gets their own Townie, an AI assistant that learns how you work (your voice, judgment, relationships, and priorities) and does real work on your behalf across email, calendar, docs, Slack, and CRM. Townies don't wait to be prompted. They observe, learn, and act. And because every teammate has one, Townies can ask each other questions and hand off work, so the whole team moves faster together.

Four months after our public launch, we became a $1B company. We recently raised a $108M Series B, co-led by Forerunner Ventures and Menlo Ventures, with continued support from Andreessen Horowitz, First Round Capital and angels such as Zach Perret, Soleio Cuervo, Scott Belsky, and more. Our founders, Jean-Denis and Tony, previously led EPD at Plaid and applied AI product at Google.

ABOUT THE ROLE

Town holds the keys to a person's entire working life. To do real work on someone's behalf, it reads their email, moves through their calendar, acts in their docs, Slack, and CRM. This means that security is absolutely paramount. We're looking for a dedicated Security Engineer to own that surface end to end.

You'll set the security bar for a company whose whole premise is trusted, autonomous access to sensitive data. That means securing the product and the agent that acts inside it, hardening the infrastructure and data pipeline behind it, and building the practices - threat modeling, secure SDLC, incident response. etc. that let us move fast without betraying that trust.

WHAT YOU'LL DO

- Own application and product security across the Town assistant and the agent action surface — the systems that read and act on user data across email, calendar, docs, Slack, and CRM.

- Threat-model autonomous agent behavior: prompt injection, tool misuse, the "lethal trifecta" of untrusted input + sensitive data + external action, and the guardrails that contain it.

- Secure the data pipeline behind Town's persistent model of each user — encryption, tenant isolation, access controls, and secrets management.

- Harden our cloud infrastructure and third-party OAuth integrations (Google, Slack, CRM) against real-world attack.

- Build the secure development lifecycle: design reviews, code review for security, dependency and supply-chain hygiene, and the tooling to scale it.

- Stand up and run incident response — detection, triage, and clean postmortems.

- Partner across engineering to make the secure path the easy path.

YOU MIGHT THRIVE HERE IF YOU...

- Have extensive experience in security engineering, with real depth in application and/or infrastructure security.

- Can read and write production code — you fix problems, not just file them.

- Have secured a multi-tenant SaaS product handling sensitive user data at scale.

- Know your way around cloud security (AWS and/or GCP), authn/authz, secrets, and encryption in practice.

- Threat-model instinctively and can explain risk to engineers and founders without hand-waving.

- Want to be the person who owns security from the ground up, and move at startup speed doing it.

- Get energy from working in person - we're 5x per week at our office in downtown SF

LOCATION

In-person in San Francisco's Financial District, five days a week. Everyone is here to do their best work and make this product a success.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Town's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Town's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Town's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.