Security Engineer, IrukaDark (Desktop AI Product) & High-Traffic Platform

## About the Role We are looking for a hands-on security engineer who can work across product security, application security, cloud security, AI security, privacy, and high-traffic operations. This role is not limited to writing security policies or reviewing checklists. You will help design, review, and improve the systems that protect user data, AI workflows, APIs, infrastructure, logs, authentication, and real-time product operations. You will work closely with the engineering and product teams to build security into the product while keeping the user experience fast and smooth. This is intended for those who have experience using IrukaDark as a user. Without the user's perspective, it is impossible to develop excellent UX. ## Responsibilities - Review the security architecture of the IrukaDark desktop app, backend APIs, and cloud infrastructure - Design security systems that can support hundreds of millions of monthly requests and events - Identify risks related to local data, clipboard access, screen context, AI prompts, logs, API calls, and external integrations - Improve authentication, authorization, session handling, API security, and abuse prevention - Support secure integration with AI APIs and external services - Design safe data handling policies for sensitive user information - Improve secrets management, key handling, and secure configuration - Build and improve vulnerability management processes - Support monitoring, alerting, incident response, and post-incident reviews - Review dependencies, supply chain risks, and deployment pipelines - Conduct application security reviews, threat modeling, and security testing - Prepare security documentation for enterprise customers - Support SOC2 readiness and other security compliance initiatives - Work with engineers to fix security issues without slowing down product development ## Requirements - Experience in security engineering, product security, application security, cloud security, or infrastructure security - Experience securing production systems with meaningful traffic - Understanding of web application security principles - Familiarity with secure coding practices and common vulnerabilities (e.g., OWASP Top 10) - Experience with cloud security platforms (e.g., AWS, Azure, GCP) - Knowledge of identity and access management (IAM), encryption, and secure authentication mechanisms - Strong understanding of network security, firewalls, and secure communication protocols - Experience with security tools (e.g., SAST, DAST, vulnerability scanners, SIEM) - Ability to write and review security documentation - Strong analytical and problem-solving skills - Excellent communication and collaboration skills - Proactive and detail-oriented with a strong sense of ownership - Passion for building secure, scalable, and user-centric products