SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Town is an applied AI company building an autonomous assistant that performs real work on behalf of users across their everyday tools—email, calendar, docs, Slack, CRM. The company recently raised $55M Series A led by Andreessen Horowitz.
As Security Engineer, you will own security end-to-end for a product that reads and acts on sensitive user data. This is a foundational role: Town's entire premise depends on trusted, autonomous access to personal information, making security paramount.
Key responsibilities:
- Own application and product security for the Town assistant and agent action surface, including systems that read and act on user data across email, calendar, docs, Slack, and CRM.
- Threat-model autonomous agent behavior: prompt injection, tool misuse, untrusted input + sensitive data + external action combinations, and guardrails to contain them.
- Secure the data pipeline behind Town's persistent user model—encryption, tenant isolation, access controls, secrets management.
- Harden cloud infrastructure and third-party OAuth integrations (Google, Slack, CRM) against real-world attack.
- Build secure development lifecycle: design reviews, security-focused code review, dependency and supply-chain hygiene, and tooling to scale practices.
- Stand up and run incident response: detection, triage, postmortems.
- Partner across engineering to make the secure path the easy path.
Ideal candidate has extensive security engineering experience with real depth in application and/or infrastructure security. You can read and write production code and fix problems, not just file them. You've secured multi-tenant SaaS products handling sensitive user data at scale. You know cloud security (AWS/GCP), authn/authz, secrets, and encryption in practice. You threat-model instinctively and explain risk to engineers and founders clearly. You want to own security from the ground up and move at startup speed. You prefer working in person—the role is 5 days per week in downtown San Francisco.
