Security Engineer - Tech Lead

Luma AI — Palo Alto, CA, USA

Apply on employer website
About Luma When theres a new wave of technology you want to be at the corethats where you have the most impact work on the hardest problems and grow the most You cant find this at an AI startup building on someone elses modelsonly at companies building the foundation models themselves The models are where the real innovation is happening As they get more powerful theyre not just improving existing softwaretheyre replacing it entirely Foundation model companies are now building products deeply integrated with their models that fundamentally transform how work gets doneamp Luma is exactly that A toptier research team with one of the best video generation models on the market Ray314 An enormous compute budget that only a few companies in the world can match 900M Series C The only one at that level directly targeting the creative space Building products that will completely change how creative work is done And were still small enough that a single great hire can reshape the company Where You Come In We are looking for a senior handson security leader to build the security foundations that will support Lumas next stage of growth Our models and products are becoming critical infrastructure for creative professionals and enterprises As adoption scales we are investing in modern principled systems for identity access control secrets encryption and safe operation of autonomous AI This is a builder role You will design and ship the platform security systems and operational tooling that allow us to move quickly while meeting the expectations of worldclass customersthings like auth and identity infrastructure finegrained access scoping breakglass escalation systems and agent permission frameworks You will partner deeply with infrastructure research and product teams to make secure design the default not something bolted on after the fact What Youll Do Design and mature how access to production systems is granted and governed Implement scalable RBAC ABAC approaches across infrastructure and products Build robust secrets management and credential lifecycle practices Establish strong encryption and key management patterns Define how agents and automated systems receive authority how it is scoped and how it is revoked Create auditability and forensic visibility for user and system actions Lead threat modeling across infrastructure product and research domains Collaborate with engineering teams to make secure patterns easy and automatic Help drive readiness for enterprise security expectations and reviews Strengthen incident detection and response capabilities Raise the companys security bar while preserving development velocity Who You Are Required You have built and operated security foundations in real production environments You are excellent at writing code reviewing infrastructure and shipping systems You recognize that in AI platforms software systems can act with real authority Youve thought deeply about how services automations or models are scoped constrained and observed You think in terms of systems and trust boundaries You have high agencyyou identify problems and drive them to resolution You can balance pragmatism with longterm rigor Engineers trust you and enjoy partnering with you What Sets You Apart Youve helped organizations evolve toward mature scalable security architectures You have experience implementing leastprivilege access and modern identity models Youve built durable approaches to secrets management and credential lifecycle You understand the nuances of securing multitenant AI platforms You have strong opinions on how autonomous systems should be permissioned and governed You know how to build detection and response capabilities in highgrowth environments You can represent the company in detailed customer and partner security discussions You build platforms and paved roads that engineers love to use Why This Role Exists AI systems are becoming actors They retrieve data They call tools They take actions independently Security is no longer just about who can log into a machine Its about defining how authority is granted constrained observed and trusted across humans and intelligent systems We are building those foundations now If you want to shape how security works at an AInative company operating at global scale we should talk




Looking for a job?

Visit Careersaas to find millions of new and unfilled roles, including thousands of remote and hybrid positions.