Staff Security Engineer at Turing in United States

Job description

• We're looking for a Staff Security Engineer to design and build the systems that keep our company and customers secure. This is a hands-on, builder-focused role: you'll spend most of your time architecting and shipping security infrastructure — detection pipelines, identity and access systems, secrets management, automated guardrails, and the tooling that lets every engineer ship safely by default.
• As a Staff engineer, you'll set the technical direction for how we build security systems, mentor engineers across the security organization, and act as a force multiplier — turning recurring manual security work into durable, self-serve platforms. You care as much about developer experience and reliability as you do about threat models, because security systems only work when people actually use them.

Responsibilities

• Architect, build, and operate core security systems and platforms: detection and response pipelines, authorization and identity infrastructure, secrets management, key management, and policy-as-code frameworks.
• Design "secure by default" paved paths so that the easiest way for engineers to build something is also the safest way.
• Lead the technical design for large, ambiguous, cross-team security initiatives — writing design docs, weighing trade-offs, and driving alignment across engineering.
• Build automation and tooling that scales security coverage without scaling headcount: automated vulnerability triage, guardrails in CI/CD, drift detection, and self-service remediation.
• Instrument and improve the observability of security-relevant events across the stack so detections are high-signal and actionable.
• Partner with product and infrastructure teams to embed security controls into the systems they're building, rather than bolting them on afterward.
• Set and raise engineering standards for the security organization: code quality, reliability, testing, on-call practices, and operational excellence.
• Mentor and grow engineers, and serve as a technical leader and trusted advisor across the broader engineering org.
• Respond to and help lead remediation during security incidents, then build the systems that prevent the next one.

Requirements

• Significant experience (typically 8+ years) building and operating production software systems, with a substantial portion focused on security engineering or security-critical infrastructure.
• Deep hands-on engineering ability. You're a strong software engineer first — comfortable owning services end to end in a language like Go, Rust, Python, or Java — and you apply that skill to security problems.
• Proven track record of designing and shipping security systems or platforms that other engineers depend on (e.g., authz/authn systems, detection platforms, secrets/key management, security tooling, or infrastructure guardrails).
• Solid grounding in security fundamentals: threat modeling, cryptography basics, identity and access management, network security, and common classes of vulnerabilities and how to systematically eliminate them.
• Experience operating in modern cloud and infrastructure environments (AWS, GCP, or Azure), including containers, Kubernetes, and infrastructure-as-code.
• Ability to lead ambiguous, cross-team technical projects and influence without authority.
• Strong written and verbal communication — you can write a clear design doc and explain a nuanced trade-off to both security specialists and general engineers.
• Experience with detection engineering, SIEM/data pipelines, or large-scale log analysis.
• Familiarity with policy-as-code tooling (e.g., OPA), supply-chain security, or SLSA-style build integrity.
• Contributions to open-source security tooling, or published research, talks, or writing on security engineering.
• Prior experience as a technical lead or Staff+ engineer in a security or platform organization.

Skills

Required

• Go
• Rust
• Python
• Java
• Threat modeling
• Cryptography basics
• Identity and access management
• Network security
• Common classes of vulnerabilities
• AWS
• GCP
• Azure

Preferred

• Detection engineering
• SIEM/data pipelines
• Large-scale log analysis
• Policy-as-code tooling (e.g., OPA)
• Supply-chain security
• SLSA-style build integrity
• Open-source security tooling
• Technical lead or Staff+ experience

Benefits

• Work at the frontier of AI, helping the world’s leading AI labs improve their most advanced models by building expert datasets, RL environments, and first-of-a-kind benchmarks.
• Contribute to leading-edge AI research and showcase your work at top conferences such as ICLR, ICML, and NeurIPS.
• Bring frontier AI innovation to the enterprise, applying lessons learned from leading AI labs to solve real-world business challenges.
• Collaborate with and learn from exceptional colleagues with deep AI experience from Google, Meta, Amazon, and other leading technology companies.
• Move at the pace of AI innovation, with the speed, ownership, and impact of a startup.