Join Town: Security Enginee
At Town, we're pioneering a new era of AI, crafting a powerful assistant that acts as a truly autonomous partner, simplifying software creation and usage in daily work. Our revolutionary platform goes beyond prompts, building a persistent, dynamic model of you — your voice, judgment, relationships, and priorities. Town observes, learns, and autonomously acts on your behalf across your entire digital workspace: email, calendar, documents, Slack, and CRM.
We're backed by significant investment, including a recently closed $55M Series A led by Andreessen Horowitz, with participation from Forerunner Ventures and continued support from First Round Capital, Alt Capital, and Conviction — plus angels including Adam D'Angelo, Soleio Cuervo, and Immad Akhund.
The Challenge: Defining Security for Autonomous AI
Imagine building the security foundation for an AI that holds the keys to a user's entire professional life. At Town, our AI assistant autonomously navigates and interacts with a user's most sensitive data across email, calendar, documents, Slack, and CRM. This unparalleled access makes security not just paramount, but our absolute core differentiator. We're seeking a visionary Security Engineer to own this critical surface, end-to-end.
You won't just set the security bar; you'll define it for a platform built entirely on trusted, autonomous access to highly sensitive data. This is a foundational role where you'll architect security across the product and its intelligent agent, fortify our critical infrastructure and data pipelines, and establish robust practices — from cutting-edge threat modeling and secure SDLC to precise incident response — ensuring we innovate rapidly without ever compromising trust.
Your Mission
Take complete ownership of application and product security for the Town AI assistant and its agent action surface, safeguarding the systems that autonomously read and act on user data across email, calendar, documents, Slack, and CRM.
Pioneer threat modeling for autonomous agent behavior, specifically addressing prompt injection, tool misuse, and the "lethal trifecta" of untrusted input, sensitive data, and external action. Design and implement the robust guardrails essential to contain these risks.
Fortify the data pipeline underpinning Town's persistent user model, ensuring ironclad encryption, stringent tenant isolation, robust access controls, and state-of-the-art secrets management.
Harden our multi-cloud infrastructure (AWS and/or GCP) and critical third-party OAuth integrations (Google, Slack, CRM) against sophisticated real-world attack vectors.
Champion and build our secure development lifecycle (SDLC), implementing rigorous design reviews, mandating security-focused code reviews, ensuring dependency and supply-chain hygiene, and developing the tooling to scale these practices.
Establish and lead our incident response program, encompassing proactive detection, rapid triage, and comprehensive postmortems.
Act as a strategic partner across all engineering teams, embedding security best practices and tooling to naturally guide developers towards the secure path.
Who You Are
Extensive, hands-on experience in security engineering, with deep expertise in both application and infrastructure security.
Proficiency in reading and writing production-grade code; you're a builder and a fixer, not just a reporter of vulnerabilities.
Proven track record securing multi-tenant SaaS products that manage highly sensitive user data at massive scale.
Expertise in cloud security (AWS and/or GCP), including authentication/authorization mechanisms, secrets management, and practical encryption implementations.
An instinctive threat modeler, capable of articulating complex risks and solutions clearly and concisely to both engineers and executive leadership.
A self-starter who thrives on owning security strategy and execution from the ground up, with the agility to move at rapid startup speed.
Energized by a collaborative, in-person work environment, operating 5 days a week from our vibrant downtown San Francisco office.
Location & Culture
Our team thrives on in-person collaboration. This role is based full-time (5 days a week) in our dynamic office in San Francisco's Financial District. We believe in the power of working together to build something truly exceptional.