SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Town is an applied AI company building an autonomous assistant that helps users create and use software in their everyday work. The assistant builds a persistent model of each user and takes real actions across email, calendar, docs, Slack, and CRM without waiting to be prompted.
As Security Engineer, you will own security end-to-end for a product whose core premise is trusted, autonomous access to sensitive user data. This is a foundational role at a company that just raised $55M Series A from Andreessen Horowitz.
Key responsibilities:
- Own application and product security across the Town assistant and agent action surface, including systems that read and act on user data across email, calendar, docs, Slack, and CRM.
- Threat-model autonomous agent behavior, including prompt injection, tool misuse, and the interaction of untrusted input, sensitive data, and external actions. Design guardrails to contain these risks.
- Secure the data pipeline behind Town's persistent user model, including encryption, tenant isolation, access controls, and secrets management.
- Harden cloud infrastructure and third-party OAuth integrations (Google, Slack, CRM) against real-world attack.
- Build the secure development lifecycle: design reviews, security-focused code review, dependency and supply-chain hygiene, and tooling to scale these practices.
- Stand up and run incident response: detection, triage, and postmortems.
- Partner across engineering to make the secure path the easy path.
You bring extensive security engineering experience with real depth in application and/or infrastructure security. You can read and write production code and fix problems, not just file them. You have secured a multi-tenant SaaS product handling sensitive user data at scale. You know cloud security (AWS and/or GCP), authentication/authorization, secrets, and encryption in practice. You threat-model instinctively and can explain risk to engineers and founders clearly. You want to own security from the ground up and move at startup speed. You prefer working in person and thrive in a collaborative environment.
Role is in-person, five days per week at Town's office in San Francisco's Financial District.
