Windsurf
Security Engineer
San Francisco
Sponsorship not specified$260k-$300kDetected 36 days ago
PythonGoRustAWSGCPAzureCloud PlatformsKubernetesCybersecurityIncident Response
About the role
- Devin executes arbitrary code on behalf of users across millions of sandboxed sessions.
- Windsurf operates inside developer environments at scale.
- Both products handle highly sensitive customer code, credentials, and infrastructure access.
Responsibilities
- Lead threat modeling, secure design reviews, and vulnerability management across Devin, Windsurf, and the underlying infrastructure they run on.
- Create internal systems for secrets management, identity and access, dependency security, and detection that integrate naturally into how the team ships.
- Build the detection pipeline, run incident response, and turn every event into systemic improvements.
- Partner with go-to-market and legal teams to support compliance and customer trust initiatives.
- Security Engineers at Cognition own one of the most interesting security surfaces in the industry.
- Own product and infrastructure security: Lead threat modeling, secure design reviews, and vulnerability management across Devin, Windsurf, and the underlying infrastructure they run on.
- Build security tooling that engineers actually use: Create internal systems for secrets management, identity and access, dependency security, and detection that integrate naturally into how the team ships.
- Lead incident response and detection: Build the detection pipeline, run incident response, and turn every event into systemic improvements.
- We are an applied AI lab building end-to-end software agents.
- Building Devin is just the first step-our hardest challenges still lie ahead.
Requirements
- proficiency in Python, Rust, Go, and comfort owning complex systems codebases.
- Degree from a top-tier university: BS, MS, or equivalent in Computer Science, Mathematics, Engineering, or a related technical discipline from a highly selective program.
- You can look at a system and quickly identify how it breaks
- Threat modeling and adversarial thinking: You can look at a system and quickly identify how it breaks
Skills
- Practical experience securing Kubernetes, cloud platforms (AWS, GCP, or Azure), and multi-tenant compute environments.
- Prior experience at a frontier AI lab, applied AI company, or developer tools company.
Compensation
- $260,000 - $300,000 + significant early-stage equity
- 401(k): Company match included
Benefits
- We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.
- Together, they represent our vision for collaborative AI teammates that enable engineers to focus on more interesting problems and empower teams to strive for more ambitious goals.
Company info
- Build the controls that customers expect from a tool deeply embedded in their engineering workflow.
- Drive customer trust: Partner with go-to-market and legal teams to support compliance and customer trust initiatives. Build the controls that customers expect from a tool deeply embedded in their engineering workflow.
- We are committed to providing reasonable accommodations for candidates with disabilities throughout the hiring process - please let us know if you need any.
Equal opportunity
- Cognition is an equal opportunity employer.
- Equal Opportunity
- equal opportunity employer.
Apply directly at Windsurf →Create a free account for alerts like thisView Windsurf immigration profile
This listing is sourced directly from Windsurf's careers page and normalized into a canonical job model.