SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Parallel is a web infrastructure company that enables leading businesses to build AI agents with programmatic access to the web. The company has raised $230 million from top-tier VCs (Kleiner Perkins, Sequoia, Index Ventures, Spark Capital, Khosla Ventures, First Round, Terrain) and is valued at $2 billion.
In this role, you will build and operate the security systems that enable Parallel to ship quickly while managing risk. Your responsibilities span application security, secure defaults, AI-assisted security tooling, and the unique attack surface of agentic systems that consume untrusted web content. You will identify and fix real vulnerabilities, then redesign underlying systems to prevent entire classes of similar issues from recurring.
You will also shape how security integrates into the development process by building reusable patterns for authentication, authorization, data handling, and outbound access; designing controls for enterprise customers; and embedding security review as a core part of software development rather than a gate-keeping process at the end.
Parallel operates a flat, talent-dense organization with a focus on solving technical and creative problems. The team works fully in-person between the Palo Alto HQ and San Francisco office. Core values include owning customer impact, obsessing over craft, accelerating change, creating win-wins, and making high-conviction bets.
REQUIREMENTS:
- Significant software engineering experience with several years focused on product or application security
- Strong expertise in web and API security, including authentication, authorization, SSRF, IDOR, injection attacks, and multi-tenant isolation
- Demonstrated success building frameworks, libraries, or secure defaults that eliminated entire vulnerability classes across a codebase or engineering organization
- Experience building security tooling using current AI models (automated code review, threat modeling, triage, agent harnesses, evaluation systems)
- Experience securing systems that process untrusted inputs, particularly LLM or agentic systems
- Ability to work independently as the primary security owner and make clear prioritization decisions
- Strong production coding skills in Python, Go, TypeScript, or similar languages
- Plus: experience with GCP, Kubernetes, security research, open source security tooling, or conference talks
