Security Engineer at Cognition

Secure the agent execution surface: Harden sandboxing, isolation, and runtime controls for Devin.
Own product and infrastructure security: Lead threat modeling, secure design reviews, and vulnerability management across Devin, Windsurf, and the underlying infrastructure they run on.
Build security tooling engineers actually use: Create internal systems for secrets management, identity and access, dependency security, and detection that integrate naturally into how the team ships.
Lead incident response and detection: Build the detection pipeline, run incident response, and turn every event into systemic improvements.
Drive customer trust: Partner with go-to-market and legal teams to support compliance and customer trust initiatives. Build the controls that customers expect from a tool deeply embedded in their engineering workflow.

Deep security engineering: Hands-on experience across product security, infrastructure security, and detection and response.
Strong software engineering fundamentals: Proficiency in Python, Rust, Go, and owning complex systems codebases.
Cloud security expertise: Kubernetes, cloud platforms (AWS, GCP, or Azure), and multi-tenant compute environments.
Web security expertise: Hands-on experience hardening complex, modern web applications.
Threat modeling and adversarial thinking: You can look at a system and quickly identify how it breaks; you think like an attacker and design like a defender.
Incident response: Calm, methodical, and effective under pressure; experience leading incidents end to end and driving the fixes that follow.