← All roles

Backend Engineer (Security)

Trigger.dev· Engineering
Apply on company site
RemoteFull-timePosted 4w ago

About the role

Backend product engineer focused on security responsibilities to design, build, and maintain secure sandbox runtimes and related tooling to safely execute untrusted user code at scale within Trigger.dev's infrastructure.

Responsibilities

  • Sandbox and runtime security. Designing and maintaining secure execution environments that isolate untrusted user code.
  • Threat detection and incident response. Building monitoring and alerting for suspicious activity, and leading response when investigations are needed.
  • Vulnerability management, end to end. Regular scanning and triage, quarterly AI-assisted security scans, and triaging disclosures.
  • Offensive security. Internal AI-assisted pen testing, potentially engaging external firms.
  • PR security review. Adding a security-specific review layer on top of the normal PR process.
  • SOC 2 and compliance. Ongoing maintenance (not standing it up from scratch).
  • Vulnerability disclosure process. Owning the vulnerability disclosure program end to end.
  • Security culture. Helping the engineering team build secure habits via reviews, documentation, and guardrails.

Qualifications

  • Real backend engineering experience. Ability to design and ship production backend systems.
  • Genuine offensive-security curiosity (pen testing, bug bounty, CTFs, hacking as hobby).
  • Comfort owning ambiguous, product-shaped security problems (sandboxing, runtime isolation).
  • A proactive mindset. Adds work to the team, not a queue for others.
  • Comfortable being on call. Reliability and security response shared across the team.
  • Open to in-person events throughout the year (if remote, team will be arranged to meet).
  • Experience building or hardening sandboxed/isolated execution environments (containers, microVMs, gVisor, Firecracker, WASM sandboxes, etc.).
  • Track record in pen testing, bug bounty programs, or CTFs.
  • Experience using AI-assisted tooling for security scanning or workflows.
  • Proven contribution to open source projects.
  • Experience at a developer tools, infrastructure, or open source company.
  • Experience with Node.js and TypeScript (reading/reviewing application code).

Skills

Required:Sandboxing and runtime isolationOffensive securityNode.js / TypeScript
Nice to have:AI-assisted security toolingOpen source contribution

Benefits

  • Generous, transparent compensation and equity.
  • Async working.
  • Home office equipment support.
  • Generous vacation (25 days) plus sick leave and parental leave.
  • Training budget for learning and development.
  • Pension contributions (company pension scheme or direct contributions).
Last updated Sep 23, 2026. Interested? Apply on the company site.
Trigger.dev logo

About Trigger.dev

Build and deploy fully‑managed AI agents and workflows

Trigger.dev is the open source platform for building AI workflows in TypeScript. Long-running tasks with retries, queues, observability, and elastic scaling.

AI tasksVideo processingCronWaitsWorkflowsAI AgentConcurrencyRetries
Company profileWebsite

More open roles at Trigger.dev

Backend Engineer (Security) at Trigger.dev | Timeplot