About the job
About the Role
Join Perplexity as a dynamic Software Engineer specializing in security, where you will play a pivotal role in developing and enhancing the software, automation, and systems that drive our security operations. This position focuses on engineering innovative security tools and AI-driven agents aimed at improving our detection and response capabilities, vulnerability management, and overall security posture across our products and infrastructure.
Responsibilities
Design, build, and maintain software and automation solutions that enhance our detection and response capabilities, including alert enrichment, triage workflows, and investigation tools.
Implement and refine internal AI agents and security bots that facilitate monitoring, investigations, reporting, and other security operations tasks.
Develop and manage systems and workflows that support our bug bounty and vulnerability disclosure program, covering intake, triage, prioritization, and remediation tracking.
Collaborate with product and engineering teams to perform threat modeling on new features and systems, propose mitigations, and integrate security guardrails into designs and implementations.
Contribute to secure-by-default libraries, services, and patterns that empower teams to build secure features effortlessly.
Integrate security signals from cloud services, endpoints, SaaS, and applications into unified pipelines and data models that bolster detection and analysis.
Automate processes to minimize manual effort in incident response, containment, and remediation.
Work closely with security engineers and fellow software engineers to review designs and code, continuously enhancing our security tools and platforms.
Qualifications
A minimum of 4 years of experience as a software engineer, particularly in developing security-related tools, platforms, or automation, or in a security engineering role with a strong emphasis on software development.
Proficiency in at least one major programming language (e.g., Python, Go, or TypeScript) with experience in building production services, command-line interfaces, or internal tools.
Experience with integration of security-relevant systems such as logging pipelines, SIEMs, EDR, cloud APIs, or identity platforms.
Hands-on experience in threat modeling, secure design, or conducting application security reviews for services or features.
Experience in operating or contributing to bug bounty or vulnerability management programs is a plus.

