You.com
Senior Security Engineer
Job Summary
The role involves acting as a security expert to support engineering teams through design reviews, threat modeling, and security testing, with a focus on building secure and resilient systems. Candidates should have extensive experience in security disciplines such as application security, DevOps, and cloud security, with proficiency in programming languages and cloud services. The position emphasizes collaboration, ownership, and managing security programs, including incident response and security tooling automation. The role aims to strengthen the company's security posture while enabling the development of trustworthy, cutting-edge technologies.
Required Skills
Benefits
Job Description
you.com is an AI-powered search and productivity platform designed to empower users with personalized, efficient, and trustworthy search experiences. As a cutting-edge technology company, we combine advanced AI models with user-first principles to deliver tools that enhance discovery, creativity, and productivity. At you.com, we are on a mission to create the most helpful search engine in the world—one that prioritizes transparency, privacy, and user control.
We’re building a team of innovators, problem-solvers, and visionaries who are passionate about shaping the future of AI and technology. At you.com, you’ll have the opportunity to work on impactful projects, collaborate with some of the brightest minds in the industry, and grow your career in an environment that values creativity, diversity, and curiosity. If you’re ready to make a difference and help us revolutionize the way people search and work, we’d love to have you join us!
About the Role
The Security Engineering team at you.com is dedicated to enabling engineering teams to securely design, build, test, and maintain the software and infrastructure that powers the company’s platforms. The team establishes a "paved road" approach, ensuring engineers can deliver secure technologies with minimal friction while maintaining a strong focus on protecting the business, earning customer trust, and fostering a culture of security, transparency, and shared responsibility. Reporting to the Head of Security, this role will champion security across you.com, driving continuous improvement and empowering teams to build trusted, resilient services.
Responsibilities
- Act as a security subject matter expert to support engineers through design reviews, threat modeling, code reviews, patch creation, and security testing.
- Collaborate with product and engineering teams to architect resilient, security-first services.
- Engineer and implement secure, scalable, and resilient systems.
- Develop and customize high-signal security tooling through automation and plugins.
- Manage day-to-day security tasks, including abuse remediation, threat research, and incident handling.
- Participate in on-call rotations and incident response efforts to ensure platform and customer security.
Qualifications
- Experience: 9+ years in security roles across disciplines such as application security, DevOps, software engineering, red teaming, security research, and AI security.
- Technical Skills: Proficiency in programming languages like JavaScript, Python, and Terraform. Expertise in AWS cloud services, GitHub, Google Workspace, and Kubernetes.
- Security Expertise: Hands-on experience in any of the following: threat modeling, penetration testing, creating security requirements, conducting source code reviews, leading security design reviews, and securing cloud environments.
- Collaboration & Ownership: Self-motivated, collaborative, and skilled at prioritizing work. A strong advocate of ownership, capable of managing problems end-to-end individually or within a team.
- Security Program Management: Proven experience managing security programs with a focus on partnership and enablement.
- Operations: Familiarity with on-call responsibilities and handling security incidents regularly in previous roles.
This role is instrumental in empowering you.com’s security mission while enabling the team to deliver secure, cutting-edge technologies.
Our salary bands are structured based on a combination of geographic tiers and internal leveling. Compensation is determined by multiple factors assessed during the interview process, with the final offer reflecting these considerations.
Company Perks:
-
Hubs in San Francisco and New York City offering regular in-person gatherings and co-working sessions
-
Flexible PTO with 11 U.S. holidays observed and a week shutdown in December to rest and recharge*
-
A competitive health insurance plan covers 100% of the policyholder and 75% for dependents*
-
12 weeks of paid parental leave in the US*
-
401k program, 3% match - vested immediately!*
-
$500 work-from-home stipend to be used up to a year of your start date*
-
$1,200 per year Health & Wellness Allowance to support your personal goals*
-
Chance to collaborate with a team at the forefront of AI research
*Certain perks and benefits are limited to full-time employees only
you.com is an E-Verify employer. We are also an inclusive, equitable, and accessible workplace. Please let us know if you require accommodation for any portion of the recruitment and hiring process.
You.com
Artificial intelligence designed for collaboration - with AI Agents that can research, solve problems, and create content for you and your team.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.