Build and maintain application security tooling, automation, libraries, and custom Semgrep or CodeQL rules. Integrate secure development controls into SDLC workflows, conduct targeted code reviews, support vulnerability remediation, and advise engineering, product, GRC, and AI/ML teams across web, mobile, and desktop products. The role also contributes to threat modeling, security education, penetration-test and bug-bounty response, and potentially security on-call rotations.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.