oscilar - Sr./Staff Security Engineer

• Own threat modeling across our core platform APIs, risk decisioning and event-ingestion systems, and agentic AI products; harden multi-tenant isolation and data-handling across designs and PRs. • Design, implement, and deploy authentication, authorization (user and API), and RBAC across our platform: own and propose new approaches as we scale • Stand up our AppSec program from the ground up: SAST (Semgrep), SCA (Dependabot/Snyk), secret scanning, IaC scanning, and container scanning on Pulumi + EKS • Build guardrails around LLM usage — prompt-injection defenses, output validation, and cost and abuse monitoring on Bedrock/Anthropic/OpenAI calls • Drive security incident process, vulnerability triage, and the responsible-disclosure workflow • Write SECURITY.md, maintain a threat registry, and champion secure-by-default patterns across the engineering org • Partner with IT on shared areas — incident response across corporate and product, access reviews, and audit evidence collection • Collaborate with product and engineering teams on feature design, embedding security early rather than gating at the end • Keep us aligned with current security standards and trends (OWASP, MITRE ATT&CK, and emerging LLM/agent security guidance)