← All roles

Software Engineer, Security

Pylon· Engineering
Apply on company site
San Francisco$180k - $280kFull-timePosted 3mo ago

About the role

Software Engineer focused on application and infrastructure security, including threat modeling, secure design and code reviews, vulnerability lifecycle management, and AI-assisted security workflows, within Pylon's security-focused platform engineering context.

Responsibilities

  • Own application and product security across shipped and upcoming work, including threat modeling, secure design reviews, and code review on areas like auth and access control
  • Build tooling to scale security (supply chain security, vulnerability management, secure-by-default libraries, developer-friendly guardrails)
  • Run the vulnerability lifecycle end to end (triage, validation, prioritization, remediation) and mature bug bounty and disclosure programs
  • Build AI-assisted security workflows (agents that scan code, propose fixes, surface risk, and controls for safe coding with agents)
  • Work hands-on with engineers to ship fixes and promote secure-by-default practices
  • Take projects from customer request through design to ship, owning them end-to-end
  • Assist with incident response (triage, investigate, coordinate fixes)
  • Expand into broader infrastructure work addressing scaling, reliability, and velocity challenges

Qualifications

  • 3+ years building production software with security as a core focus, or strong infra/backend engineering aiming to specialize in security
  • Experience turning risk into engineering work and shipping for impact
  • Solid understanding of application security fundamentals (auth, sessions, APIs, secrets handling, common vulnerability classes) and how to design them out
  • Experience with vulnerability triage, bug bounty, disclosure, or incident response, balancing urgency with pragmatism
  • Strong use of AI in software development and ability to juggle multiple workstreams
  • Startup experience and ability to navigate ambiguity
  • Growth mindset and openness to feedback
  • Willingness to work in SF or relocate, prefer in-person collaboration
  • (Bonus) Experience with React, Golang, GraphQL, and AWS
  • (Bonus) Experience building agentic products in production

Skills

Required:Application security fundamentalsThreat modelingCode reviewVulnerability management
Nice to have:AI-assisted security tooling

Benefits

  • Commuter benefits
  • Parental leave
  • 14 company holidays + unlimited PTO
  • Annual offsite
  • Lunch, dinner, and snacks at the office
  • Fitness stipend
Last updated Jul 23, 2026. Interested? Apply on the company site.
Pylon logo

About Pylon

The only customer support platform built for B2B.

Pylon is the modern alternative to Zendesk, Intercom, Freshdesk, and Salesforce Service Cloud. We help B2B companies track customer support issues across common B2B channels including shared Slack channels (Slack Connect), Microsoft Teams, email, in-app chat, ticket forms, Slack community, and more. Hundreds of fast-growing YC companies of all sizes like Vellum, Hightouch, and Deel are customers. Learn more at usepylon.com

AI supportB2B support platformticketingchatknowledge baseAI agentsaccount intelligence
Company profileWebsite

More open roles at Pylon