About the role
Role
At Variance, we are teaching machines to make the hardest judgement calls at scale. That means building AI agents for the high-stakes gray-area of risk investigations, fraud, and identity reviews.
We’re a small, talent-dense team in San Francisco, with former founders and talent from top AI labs. Our customers include several Fortune 500s, global marketplaces, and regulated financial institutions. If you thrive on extreme ownership, moving fast, and working directly with founders, you’ll feel at home here.
We’re looking for a Security Engineer to help build that foundation. You’ll work across product, infrastructure, and internal systems to make Variance secure by design and help us meet the bar required to deploy AI into critical workflows at the largest companies in the world.
You're a fit if you have:
- 4+ years in security engineering, DevSecOps, application security, or cloud security roles (or equivalent experience).
- Strong hands-on experience in at least one major cloud provider (AWS, GCP, or Azure) and working knowledge of the others.
- Experience building or securing CI/CD pipelines and applying security controls in a developer-friendly way.
- Practical experience with SAST, SCA, DAST, and container scanning, including tuning and validation of findings.
- Ability to perform application and architecture security reviews and communicate findings clearly to engineers.
- Proficiency in at least one programming language used in modern web stacks (Python, Go, TypeScript/JavaScript, Java, or similar).
- Working knowledge of Linux, networking fundamentals, identity and access management, and common web vulnerabilities (OWASP Top 10).
- Strong written communication and documentation skills.
What you’ll do