Senior Security Engineer, AI Security

In the role of Senior Security Engineer, AI Security, you’ll help shape how Dropbox secures AI systems and agentic workflows, building and operating the controls that protect the infrastructure, tools, and data they rely on. You’ll tackle challenges such as prompt injection, secure agent access, and MCP integrations, turning emerging risks into practical, reusable safeguards. Partnering across engineering and security, you’ll lead hands-on work that enables teams to adopt AI safely while protecting customer data.

• Remote - US: Select locations
• Remote
• Full Time
• Dropbox is a Virtual First company. For this role, we are hiring in Zones 2 and 3.

Role Description

Security Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration.

Responsibilities

• Design, deploy and operate infrastructure-level security controls for Dropbox's AI and agentic infrastructure, including cloud infrastructure, Kubernetes and data stores.
• Design and implement secure authentication, authorization and networking patterns for AI agents and other non-human actors
• Lead security implementation for secure usage of AI tools and governance.
• Maintain a high and continuously improving bar for the security of Dropbox infrastructure in order to protect customer data.
• Review the current and upcoming infrastructure stack from a security perspective and provide hardening mechanisms and recommendations.
• Deploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructure.
• Collaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security posture.

Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment.

Requirements

• 8+ years of Security Experience, demonstrating impactful contributions to security strategies.
• Experience in securing agentic AI systems with hands-on implementation of security controls targeting AI-specific vulnerabilities like prompt injection, data or model poisoning, and AI supply-chain risk.
• Experience in designing and implementing identity and authorization for non-human workloads and agents using modern frameworks such as SPIFFE/SPIRE, OAuth 2.1, OIDC, or cloud provider equivalents.
• Experience implementing policy-as-code, infrastructure-as-code, and security automation for cloud and AI platforms.
• Experience with agentic frameworks and MCP tool integration.
• Experience with cloud security technologies for providers like Amazon Web Services (AWS), Google Cloud Platform (GCP) or Microsoft Azure.
• Proficiency using one or more scripting or high-level languages to automate tasks, manipulate data, or build small systems e.g. Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, Java
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiency.

Preferred Qualifications

• Experience securing MCP-based systems or similar AI agent and tool protocols.
• Experience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakers.
• Familiarity with NIST AI RMF, NIST SP 800-218A, OWASP LLM and agentic security guidance.
• Experience in Kubernetes and container security.
• Experience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM or SOAR.
• Certifications such as CISSP, CISM, or equivalent.
• Involvement in security community activities, conferences, or publications.

Durable Skills

AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:

• Awareness: Understand yourself and others.
• Judgment: Evaluate information and make decisions in complex situations.
• Adaptability: Learn, adjust, and stay effective through change.
• Connection: Communicate, collaborate, and build trust.

Compensation

This role is not available in Zone 1.

US Zone 2

$214,200—$289,800 USD

US Zone 3

$190,400—$257,600 USD

The range(s) listed above is the expected annual salary/OTE (On-Target Earnings) for this role, subject to change. Please note, OTE are for sales roles only.

Salary/OTE is just one component of Dropbox’s total rewards package. All regular employees are also eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).

Dropbox uses the zip code of an employee’s remote work location to determine which metropolitan pay range we use. Current US Zone locations are as follows:

• US Zone 1: San Francisco metro, New York City metro, or Seattle metro
• US Zone 2: California (outside SF metro), Colorado, Connecticut (outside NYC metro), Delaware, Illinois (Chicago metro), Indiana (Chicago metro), Maryland, Massachusetts, Michigan (Chicago metro), New Hampshire, New Jersey (outside NYC metro), New York (outside NYC metro), Oregon, Pennsylvania (D.C. metro), Pennsylvania (outside NYC metro), Texas (Austin metro) Virginia (DC metro), Washington (outside Seattle metro), Washington DC metro, West Virginia (DC metro), Wisconsin (Chicago metro)
• US Zone 3: All other US locations

Company Description

Dropbox isn’t just a workplace—it’s a living lab for designing a more enlightened way of working. Our Virtual First model combines the autonomy of a distributed workplace with the power of human connection, creating space for meaningful work and lasting relationships. With a startup mindset and enterprise-level opportunities, we expect Dropbox employees to think critically, stay curious, and use modern tools, including AI, to improve how work gets done.

Team Description

The Dropbox Engineering Team develops the technology, platforms, and products that create more enlightened ways of working for hundreds of millions of people. Customers rely on Dropbox to manage, share, and collaborate on content seamlessly. Our infrastructure spans high-performance servers and cutting-edge components across multiple data centers worldwide, ensuring reliability, speed, and scalability at a global scale.

Virtual First

Dropbox’s Virtual First way of working is designed to help people do their best work with flexibility, autonomy, and connection. Day to day, teams work remotely with nonlinear schedules and core collaboration hours that support deep focus and individual working styles. We prioritize asynchronous communication to improve clarity, respect deep work time, and reduce unnecessary meetings. While remote work is the primary experience for our employees, we also prioritize intentional, in-person connection.

This role requires travel to offsites and various other team gatherings (approximately 5-10% of the year or 2-3 days per quarter).

AI Fluency

AI fluency is a core part of how we work and grow. It’s not about being an expert—it’s about using these tools thoughtfully and effectively to improve your work and support others. We look for four key behaviors in candidates:

• Ownership: You use AI responsibly by protecting data, applying sound judgment, and taking accountability for the quality and accuracy of your work.
• Experimentation: You explore new AI capabilities and apply them to improve workflows within approved tools and practices.
• Leverage: You use AI to enhance thinking, improve efficiency, and increase your impact and your team’s.
• Learning: You stay current on emerging AI tools and trends, continuously build your skills, and share what you learn with others.