← All roles

Member of Technical Staff, Application Security

Listen Labs· Engineering, Product & Design
Apply on company site
San Francisco, CA, New York, NY$180k - $300kFull-timePosted 1w ago

About the role

Engineer who builds security into a complex AI-native product. Write code, ship fixes, and understand system design to secure data, multi-tenant environments, AI-native attack surfaces, and the Human API while enabling secure, scalable growth.

Responsibilities

  • Securing the Database of Humanity. We hold voice, face, and device-linked profiles for millions of people. You'll help design the protections that data deserves: encryption, access boundaries, retention, and abuse resistance, built into the product rather than bolted on.
  • Multi-Tenant Isolation. ListenLabs staff, customer admins, and study participants all touch the platform with very different privileges. You'll make sure the boundaries between tenants, roles, and studies hold up, and you'll find the places where they don't before anyone else does.
  • AI-Native Attack Surface. Our interviewer, Study Composer, and Research Agent all process untrusted human input and take actions. You'll threat-model prompt injection, data exfiltration through model outputs, tool and agent permissions, and the new failure modes that appear when LLMs sit inside the trust boundary.
  • Securing the Human API. As we embed Listen into Slack, Linear, IDEs, and coding agents, we're building authentication, authorization, and API surfaces for programmatic and agentic callers. You'll help get those designs right from the first version.
  • Security Engineering Platform. You'll build the paved road: secure-by-default libraries and patterns, SAST/DAST/SCA and secrets scanning wired into CI, dependency and supply chain hygiene, and fast feedback so engineers can ship quickly without shipping vulnerabilities.
  • Design and Code Review. You'll review architecture and pull requests alongside the engineers who wrote them, and you'll often write the fix yourself.

Qualifications

  • You're an engineer first. Comfortable in a modern backend stack (TypeScript and Terraform), can read and write production code, and participate in code reviews. Junior-level or better development skills required.
  • You understand how things are built, and how they break. Knowledge of OWASP Top 10 as failure patterns of real design decisions; ability to explain authorization bugs and threat models.
  • You build the fix, not just the finding. Able to ship guardrails, libraries, pipeline checks, or patches.
  • Real depth in application security fundamentals: authentication and authorization (OAuth/OIDC, sessions, RBAC), cloud and infrastructure security basics, secrets management, secure API design, and common vulnerability classes across web and backend systems.
  • Curious about AI security. Interest in how LLM systems fail and best practices in a field still being written. Prior LLM security experience is a plus but not required.
  • Clear writing and communication. Ability to justify tradeoffs, explain risk to engineers, and get fixes prioritized in an environment with limited meetings.
  • Problem-solving end to end. Owns scoping, considers customers and trust, and takes ownership of decisions.

Skills

Required:Backend development (TypeScript, Terraform)Authentication and AuthorizationCloud and infrastructure securitySecure API designThreat modeling

Benefits

  • Health, covered: Full medical, dental, and vision. FSA/HSA and life insurance available.
  • Competitive Compensation with meaningful equity ownership; base range $180,000 – $300,000.
  • Annual Learning Stipend: books, courses, conferences, coaching, language lessons, etc.
  • Annual Wellness Stipend: gym memberships, race fees, massages, ergonomic gear, and more.
  • Monthly Stipend for AI tools: software and GPU credits.
  • Lunch/dinner in SF; NYC and London teams receive daily meal credit.
  • Flexible time off: take-what-you-need vacation policy.
  • Company offsites and events (holiday party).
  • Room to grow: own end-to-end processes from scratch as an early team member.
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Listen Labs

<head> meta description content: "Listen Labs conducts customer interviews for you and summarizes responses into insightful and actionable reports."

Listen Labs conducts customer interviews for you and summarizes responses into insightful and actionable reports.

ai-agents-and-applicationscustomer interviewsinsightsreportswing-list-2026wing-list-2026-mid-stage
Company profileWebsite

More open roles at Listen Labs