Security Engineer

Join Assembled, a company at the forefront of AI and SaaS technology. As a Security Engineer, you will lead application security across our products, influence architecture, and build tooling to manage vulnerabilities. This high-ownership role offers the opportunity to reshape security at Assembled. You will work closely with product managers and engineers, establish product security practices, and respond to security incidents. The ideal candidate has 5+ years of hands-on application security experience, strong software engineering fundamentals, and a passion for AI.

• Lead application security across SaaS and AI products, establishing product security practices and influencing architecture.
• Integrate and automate controls for secrets, access, and dependency security within engineering workflows and CI/CD pipelines.
• Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements.

• People get to this kind of role through many paths. Your background might be in product security, application security, security engineering, DevSecOps, infrastructure, technical consulting, or something less conventional. We care most about how you think and what you have owned
• Security engineering expertise. You have 5+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation
• Good risk judgment. You understand the tradeoff between security and shipping velocity. You’ve operated in programs that preserved speed (or can speak to why past programs destroyed it). Engineers trust you as a partner
• Strong software engineering fundamentals. You have experience writing and reviewing production code in a complex codebase
• AI-pilled. You actively use AI tools for security investigation, testing, or remediation and can evaluate their limitations. You have a point of view on how this changes the product threat model and how the security role evolves
• We know great candidates don’t always meet every requirement listed in a job description. If the role excites you and you believe you can make an impact at Assembled, we encourage you to apply
• Background with large-scale, multi-tenant SaaS applications handling sensitive customer data
• Experience securing AI/ML applications, including prompt injection, unauthorized tool use, and adversarial input protections
• Familiarity with our tech stack (described above)
• Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS)
• Experience as a first or early security hire, or building security practices without a large team or established playbook