Perform targeted code reviews, and develop follow-up tooling or controls to prevent regressions.
Collaborate cross-functionally with engineering, product, GRC, and AI/ML teams to proactively address security risks, especially in fast-moving and emerging tech areas.
Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.
Requirements
4+ years of experience in application security or security engineering roles.
Hands-on experience building or using security automation tools to improve developer workflows and product security.
Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports.
Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments.
Solid understanding of common vulnerability classes (e.g., injection, XSS, authN/authZ issues) and practical mitigation strategies.
Comfortable working in cross-functional environments and supporting multiple product and engineering teams simultaneously.
Experience participating in or supporting incident response or security on-call rotations is a plus
Preferred Qualifications
Experience in application security engineering, with a strong focus on security tooling and automation.
Demonstrated ability to write and maintain custom security rules and integrate them into developer workflows.
Experience with machine learning systems, particularly generative AI, and the ability to support secure development in AI-driven products.
Experience developing internal libraries or frameworks that reduce or eliminate entire classes of vulnerabilities.
Proficient in software development, with experience contributing production-level code in one or more modern languages.
Familiarity with securing diverse application types, including web, mobile, and native platforms.
Experience with data security, including tooling for data protection, access control, and encryption.
Strong communication skills and ability to build trusted partnerships with cross-functional teams.
Durable Skills
AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:
Awareness: Understand yourself and others.
Judgment: Evaluate information and make decisions in complex situations.
Adaptability: Learn, adjust, and stay effective through change.
Connection: Communicate, collaborate, and build trust.
To learn more about why these skills matter and what the data shows about thriving through change, read this blog post from our Chief People Officer, Melanie Rosenwasser.
Compensation
