Apply now

Posted 1 hour ago

Senior Security Engineer, AI Security

@ Dropbox

Remote in Canada

Remote8+ years experience
Apply now
SIGNALS

Responsibilities:

  • Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and…
  • Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors
  • Lead security implementation for secure usage of AI tools and governance.
  • Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
  • Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms andrecommendations.
  • Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructure.

Requirements summary:

  • 8+ years of Security Experience, demonstrating impactful contributions to security strategies.
  • Experience in securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI…
  • Experience in designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider…
  • Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
  • Experience with agentic frameworks and MCP tool integration.
  • Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.

Tools & skills

Source and dates

Employer career site / ATS feed · greenhouse

Employer posting date
2026-11-10
First seen by our source
2026-11-10
Source record updated
2026-11-10

These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.

Dropbox

Saved company profile

Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.

Dropbox is the one place to keep life organized and keep work moving.

Full company description

Dropbox is the one place to keep life organized and keep work moving. With more than 700 million registered users across 180 countries, we're on a mission to design a more enlightened way of working. To learn more about working at Dropbox, visit jobs.dropbox.com We also have a few simple guidelines to keep this space respectful and productive. Please avoid: - Harassing other people or using language that’s hateful, offensive, vulgar, or advocates violence - Trolling, fraud and spamming - Violating someone else’s rights or privacy - Advertising or soliciting donations - Link baiting - Posting off topic comments or thread hijacking We may remove comments that violate these guidelines.

LinkedIn followers
526,561
People associated on LinkedIn
4,220
Reported office locations
  • 1800 Owens St, San Francisco, California 94158, US
  • 1 Hatch Street Upper, Dublin, County Dublin 2, IE
  • Am Kaiserkai 69, Hamburg, HH 20457, DE
  • 701 5th Ave, Seattle, WA 98104, US
Business categories
  • Consumer
  • Higher Education
  • File Sharing
  • Productivity Tools
  • Education
  • Web Hosting
  • Collaboration
  • Enterprise Software
  • Secondary Education
  • Private Cloud
Other recorded names
  • Dropbox
Specialties
  • Cross-platform file sync
  • File sharing
  • Online backup
  • Cloud storage
  • Collaboration
  • smart workspace
  • team communication
  • and productivity
Profile identifies a recruitment agency
No
Reported total investment
2,809,215,000

Currency and observation date were not supplied; this is not a current valuation or a funding round.

Dropbox is the one place to keep life organized and keep work moving. With more than 700 million registered users across 180 countries, we're on a mission to design a more enlightened way of working. To learn more about working at Dropbox, visit jobs.dropbox.com We also have a few simple guidelines to keep this space respectful and productive. Please avoid: - Harassing other people or using language that’s hateful…

FieldValue
IndustrySoftware Development
Company size1,001-5,000 employees
HeadquartersSan Francisco, California
Organization typePublic Company
Year founded2007
SpecialtiesCross-platform file syncFile sharingOnline backupCloud storageCollaborationsmart workspaceteam communicationand productivity
Open jobs on Jobsy8
LinkedInView page
Job description

Role Description

Security Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration.

In this role, you’ll help shape how Dropbox secures AI systems and agentic workflows, building and operating the controls that protect the infrastructure, tools, and data they rely on. You’ll tackle challenges such as prompt injection, secure agent access, and MCP integrations, turning emerging risks into practical, reusable safeguards. Partnering across engineering and security, you’ll lead hands-on work that enables teams to adopt AI safely while protecting customer data.

Our Engineering Career Framework is viewable by anyone outside the company and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.

Responsibilities

  • Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and data stores.
  • Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors
  • Lead security implementation for secure usage of AI tools and governance.
  • Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
  • Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms andrecommendations.
  • Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructure.
  • Collaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security posture.

Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.

Requirements

  • 8+ years of Security Experience, demonstrating impactful contributions to security strategies.
  • Experience in securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI supply-chain risk.
  • Experience in designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider equivalents.
  • Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
  • Experience with agentic frameworks and MCP tool integration.
  • Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
  • Proficiency using one or more scripting or high-level languages to automate tasks, manipulate data, or build small systems e.g. Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, Java
  • Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiency.

Preferred Qualifications

  • Experience securing MCP-based systems or similar AI agent and tool protocols.
  • Experience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakers.
  • Familiarity with NIST AI RMF, NIST SP 800-218A, OWASP LLM and agentic security guidance.
  • Experience in Kubernetes and container security.
  • Experience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM or SOAR.
  • Certifications such as CISSP, CISM, or equivalent.
  • Involvement in security community activities, conferences, or publications.

Durable Skills

AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:

  • Awareness: Understand yourself and others.
  • Judgment: Evaluate information and make decisions in complex situations.
  • Adaptability: Learn, adjust, and stay effective through change.
  • Connection: Communicate, collaborate, and build trust.

To learn more about why these skills matter and what the data shows about thriving through change, read this blog post from our Chief People Officer, Melanie Rosenwasser.

Compensation

Canada Pay Range

$205,700—$278,300 CAD

Similar jobs

  • Senior Security Engineer

    Mississauga, ON
    Full Time

    Amyantek

    5+ YOECandidates need 5 to 8 years in senior security engineering or lead roles, with proven hands-on IAM and greenfield implementation experience. Required skills include Active Directory, Microsoft Entra ID, ADFS, SAML, OAuth 2.0, OIDC, SSO, MFA and Privileged Access Management, plus a degree or diploma in IT, computer science, cybersecurity or a related field.

    ADFS, Active Directory, Microsoft Entra ID, Microsoft 365, Azure, Microsoft Defender

  • Senior Security Engineer

    Toronto, ON
    On-siteFull Time

    Venn

    7+ YOECandidates need 7+ years in security engineering, application security or software engineering with a security focus, and a track record at a startup or high-growth company. Strong backend coding (Java or Kotlin preferred), cloud security (AWS), identity expertise and production incident leadership are required.

    AWS

  • Security Engineer, GRC

    Remote in Canada
    RemoteFull Time

    1Password

    3+ YOE1Password needs candidates with three or more years in security, compliance, risk, audit or program management. Candidates should know frameworks such as SOC 2, ISO 27001, NIST 800-53 or FedRAMP, use GRC platforms and automation, and actively apply AI in their work.

    Drata, Vanta, Secureframe, ServiceNow, Archer, LogicGate

  • Security Engineer - Android & Linux

    Vancouver, BC
    $121k–$157k/yrOn-siteFull Time

    HP

    7+ YOECandidates need a four-year or graduate degree in computer science or electrical engineering, or equivalent experience, typically 7 to 10 years in firmware or embedded development. Strong skills in C, C++, Linux, embedded systems and real-time operating systems are required.

    Git

    Security Engineer - Android & Linux

    Vancouver, BC
    $121k–$157k/yrFull Time

    HP

    7+ YOECandidates need a four-year or graduate degree in computer science or electrical engineering, or equivalent experience, typically 7 to 10 years in firmware or embedded development. Strong skills in C, C++, Linux, embedded systems and real-time operating systems are required.

    Git

    Security Engineer - Android & Linux

    Vancouver, BC
    $121k–$157k/yrFull Time

    HP

    7+ YOECandidates need a four-year or graduate degree in computer science or electrical engineering, or equivalent experience, typically 7 to 10 years in firmware or embedded development. Strong skills in C, C++, Linux, embedded systems and real-time operating systems are required.

    Git

  • Security Engineer II - Identity and Access Management

    Remote in Canada
    RemoteFull Time

    Marqeta: Marqeta is a flexible-first company with headquarters in Oakland, CA.

    3+ YOECandidates need at least 3 years of related experience with a bachelor's degree (or 2 years with a master's). They need hands-on experience with IAM tools, working knowledge of SAML, OIDC, SCIM and AWS IAM, and scripting skills in Python or PowerShell.

    Okta, CyberArk, Britive, SailPoint, Lumos, AWS

  • Senior Security Engineer - Insider Threat

    Remote in Canada
    $153k–$213k/yrRemote

    Affirm: Affirm only uses legitimate company email address domains (either “@affirm.com” or "@us.greenhouse-mail.io”) to communicate with candidates via email.

    Candidates need deep experience in security engineering, security operations, insider risk or digital forensics, and a track record of standing up new security capabilities. They must be able to run investigations, write detection logic in a SIEM, and work with Python and automation platforms.

    Splunk, Elastic, Panther, Chronicle, DLP, UEBA

Locations & environments

Locations

All of CanadaRemote · Hybrid · On-site · Field

Pro tip: add remote jobs to widen your search.

Exclude locations

Workplace type

Company jobs in these results

These are this company’s jobs loaded in your current search. The company may have more openings.