D
Senior Security Engineer, AI Security
Contract type
Ongoing
Work mode
Remote · Canada
Experience
Senior · 8+ years
Job description
Security Engineer role at Dropbox focused on securing AI systems and agentic workflows, building and operating controls that protect the infrastructure, tools, and data they rely on. The role involves tackling prompt injection, secure agent access, and MCP integrations while partnering across engineering and security.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Remote · Canada
- Pay
- CAD 205,700 – 278,300 / year
What you'll do
- Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and data stores.
- Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors.
- Lead security implementation for secure usage of AI tools and governance.
- Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
- Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms and recommendations.
- Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox's on-prem and cloud infrastructure.
- Collaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security posture.
- Participate in on-call rotations if the team has one, being available for calls during both core and non-core business hours.
What we're looking for
- 8+ years of Security Experience, demonstrating impactful contributions to security strategies.
- Experience in securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI supply-chain risk.
- Experience in designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider equivalents.
- Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
- Experience with agentic frameworks and MCP tool integration.
- Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
- Proficiency using one or more scripting or high-level languages to automate tasks, manipulate data, or build small systems e.g. Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, Java.
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiency.
Nice to have
- Experience securing MCP-based systems or similar AI agent and tool protocols.
- Experience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakers.
- Familiarity with NIST AI RMF, NIST SP 800-218A, OWASP LLM and agentic security guidance.
- Experience in Kubernetes and container security.
- Experience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM or SOAR.
- Certifications such as CISSP, CISM, or equivalent.
- Involvement in security community activities, conferences, or publications.
Apply
Direct apply at Dropbox
Opens the job posting at Dropbox
About Dropbox
Mission
To integrate security seamlessly into Dropbox, empowering confident collaboration.
Key facts
- Trusted by millions
- Engineering Career Framework is viewable by anyone outside the company