Software Engineer, Security

Cursor6 months ago

Location

SF / NY

Type

Full Time

Salary

USD 150,000 – 250,000

Level

Mid

Role

Security Engineer

Posted

Sep 3, 2025

Full TimeMid

The role

Summary

Cursor is seeking a Security Software Engineer to build secure products end-to-end, covering enterprise security, cloud infrastructure, and embedded product protections. The role combines strong software engineering skills with security expertise to safeguard the AI-powered coding platform and protect customers in a fast-moving startup environment.

What you'll do

Enterprise Security Architecture: Design and implement comprehensive security solutions for enterprise customers including authentication, authorization, and compliance frameworks

Cloud Infrastructure Security: Build and maintain secure cloud infrastructure with least-privilege access controls and just-in-time provisioning systems

AI Agent Security: Develop secure environments for AI agents to interact with code, implementing safe boundaries for agent manipulation of user systems

Security Code Review Automation: Build AI-augmented code review systems that automatically identify security vulnerabilities and enforce secure coding practices

Data Protection Implementation: Create frameworks and tools to prevent inappropriate data logging and ensure sensitive information is properly handled throughout the platform

Vulnerability Assessment: Proactively identify and remediate security vulnerabilities across the entire product stack, from frontend to backend infrastructure

Security Tooling Development: Build internal security tools and automation to enable developers to work securely without friction

Incident Response: Lead security incident response efforts and post-mortem analysis to continuously improve security posture

What we look for

Technical

Software Engineering ExpertiseStrong foundation in software development with 3-5 years of experience building scalable systems

Security Engineering ExperienceHands-on experience building or scaling secure systems in fast-moving startup environments

Cloud Security KnowledgeDeep understanding of cloud security principles, AWS/GCP/Azure security services, and infrastructure as code

Authentication SystemsExperience with OAuth, SAML, JWT, and other enterprise authentication protocols

Secure Coding PracticesExpertise in secure software development lifecycle, threat modeling, and vulnerability assessment

Education

Bachelor's DegreeComputer Science, Cybersecurity, or related technical field (or equivalent practical experience)

Experience

Security-First Development3-5 years building secure software systems with security considerations embedded from design phase

Startup EnvironmentExperience working in fast-paced startup environments with ability to wear multiple hats and own problems end-to-end

Enterprise SecurityBackground in enterprise security requirements, compliance frameworks (SOC2, GDPR), and B2B security needs

Skills

Required skills

Programming LanguagesProficiency in Python, Go, or similar systems programming languages for security tooling

Cloud PlatformsDeep experience with AWS, GCP, or Azure security services and infrastructure

Security FrameworksKnowledge of OWASP, NIST, and other security frameworks and best practices

DevSecOpsExperience integrating security into CI/CD pipelines and development workflows

Threat ModelingAbility to analyze systems for potential security vulnerabilities and design mitigations

Nice to have

AI/ML SecurityExperience securing machine learning systems and AI-powered applications

Container SecurityKnowledge of Docker and Kubernetes security, including image scanning and runtime protection

Zero Trust ArchitectureExperience implementing zero trust security models and least privilege access

Compliance ExperienceFamiliarity with SOC2, ISO 27001, or other security compliance frameworks

Open Source SecurityExperience with security in open source ecosystems and supply chain security

Compensation & benefits

Salary

USD 150,000 – 250,000 (annual)

Stock options

Available

Benefits

Equity Package

Significant equity stake in a fast-growing AI startup with substantial upside potential

Health Insurance

Comprehensive medical, dental, and vision coverage for employees and families

In-Person Culture

Cozy offices in North Beach San Francisco and Manhattan New York with well-stocked libraries

Learning Resources

Access to extensive technical libraries and resources for continuous learning

Small Team Impact

Work directly with founders and have outsized impact on product direction and company growth

Interview process

1
Application Review — Initial screening of application materials including resume, portfolio, and GitHub contributions
2
Technical Phone Screen 1 — 45-minute technical discussion focusing on security engineering principles and system design
3
Technical Phone Screen 2 — 60-minute coding interview with security-focused problems and vulnerability analysis
4
Onsite Full Day — In-person visit to SF or NY office including small project work, team meetings, and cultural fit assessment
5
Final Decision — Team discussion and reference checks followed by offer decision within 1-2 business days