Senior Security Engineer

About the role

What Do We Do?

Triple Whale is the AI operating system built for modern commmerce. We help you see what's actually working in your business, what's not, and what to do next. Then we take action for you — pausing the underperforming ad, generating the next batch of creative, flagging the inventory risk before it hurts your bottom line.

We pull every signal in your business into one place, and put it on the most trusted measurement foundation in the industry. And on top of that, we give you the only AI harness in commerce — Moby — letting you tap any LLM you want, grounded in the full context of your business. Moby doesn't just surface insights, it executes decisions for you, with automations that make the rest of your stack smarter.

The result: more than 65,000 brands like Kitsch, OUAI, and True Classic turn mountains of complex data into actions that actually grow profit, at a speed and scale that is not humanly possible.

What You're Applying For

Triple Whale is a data and AI platform serving thousands of ecommerce brands. We handle sensitive merchant data and credentials, making security core to our product.

As a Senior Security Engineer, you’ll design and build security controls across our cloud infrastructure, applications, and AI systems. You’ll work alongside the Infrastructure and engineering teams to turn security requirements into practical protections that support fast development.

Stack: GCP, GKE, TypeScript, Pulumi, Cloud SQL, MongoDB, ClickHouse, and more.

What You’ll Do

Design and implement controls for workload identity, least-privilege IAM, secrets management, network isolation, and egress.

Secure AI agents and code execution environments through sandboxing and clear access boundaries.

Conduct security reviews of services, systems, and architecture, and work with engineers to implement fixes.

Perform internal penetration tests to identify vulnerabilities and validate security controls.

Build security monitoring, detection rules, and alerting across our infrastructure and applications.

Build security into development workflows, CI/CD, infrastructure as code, and software dependencies.

Support incident investigations and address underlying security weaknesses.

What You’ll Bring

Strong hands-on experience in cloud, infrastructure, or application security.

Deep understanding of Kubernetes, IAM, networking, and cloud security; GCP experience preferred.

Strong TypeScript development skills and experience building security tooling and automation.

Experience with security reviews, threat modeling, penetration testing, and vulnerability remediation.

Practical judgment and the ability to work independently alongside engineering teams.

Join Us in Making Waves

If you’re looking for more than just a job and want to be part of a movement reshaping the future of Ecommerce, Triple Whale is the place for you. We’re on the lookout for driven, curious, and creative individuals ready to thrive in a fast-paced environment.

Referred? Got here thanks to a friend? Splash some gratitude their way! They'll need to submit your application through our referral system to make it official.

#LI-Remote

Posting text as published by Triple Whale.

The evidence behind this listing

Workplace

Remote Matched in posting text

Seniority

senior From the job title

Employment type

Not established

Location as listed

New York City

Pay and work authorization

Stated pay

Not stated

Visa sponsorship

Not stated

Security clearance

Not established

Citizenship

Not established