Security Engineer

What we're building

In 2026, we're on the verge of an "infinite software crisis." How will we support, maintain, and operate the explosion in application development?

Our answer is Sazabi: the AI-native observability platform for fast-moving engineering teams.

Sazabi gives teams a single place to ask questions about their production systems in plain language, automatically visualize what's happening, and get to the root cause 10x faster. No tedious instrumentation. No dashboard configuration. No alert tuning. Just answers.

We're backed by tastemakers from the world's top AI companies: Vercel, Graphite, Daytona, Browserbase, LangChain, Mastra, Replit, and more.

What you’ll do

Design and implement security across our entire stack (infra, app, data, and AI systems)

Own authentication, authorization, and tenant isolation from first principles

Build secure-by-default systems for log ingestion, storage, and querying

Identify and mitigate risks in an AI-native product (prompt injection, data leakage, model misuse)

Lead incident response and postmortems for security-related events

Establish security practices without slowing down engineering velocity

Work closely with engineering to embed security into everyday development—not bolt it on later

What we're looking for

Strong experience in application and/or infrastructure security at a modern SaaS company

Deep understanding of common vulnerabilities (OWASP, auth flaws, data exfiltration, etc.)

Experience securing distributed systems and APIs

Comfort working in fast-moving, ambiguous environments without predefined processes

Pragmatic mindset: you know when to push hard on security vs. unblock shipping

Bonus: experience with AI/LLM security, observability systems, or developer tools

Our tech

Our stack is TypeScript end-to-end. We use PostgreSQL for relational data, Temporal for durable execution, and the Vercel AI SDK to orchestrate our AI agents against the latest models. At the infrastructure layer, we use Terraform, Kubernetes, and AWS.

Some of the most interesting engineering problems we grapple with are:

AI agents at production scale

Log processing at scale

Multi-region data architecture

Real-time streaming infrastructure

Evals and reinforcement learning

Zero-downtime deployments and fast rollbacks

What we offer

Competitive salary and equity

Free lunches (in-office only)

Health, dental, and vision insurance

Unlimited paid time off

Paid parental leave

Learn how we think and work

Our team comes from Brex, Y Combinator, Rootly, Google, Doppel, and other top tech companies. We move fast and hold a high bar for both the product and each other.

We operate according to six values:

Integrity. We say what we mean, do what we say, and own our mistakes.

Urgency. We treat every week like it matters, because it does.

Craftsmanship. We care deeply about the quality of our work.

Service. We're here to make developers’ and our teammates’ lives easier.

Kindness. We're direct, and we move fast, but we treat each other well.

Fun. We genuinely enjoy working together. If you don't love what you're building and who you’re building it with, what's the point?

You can find out more about us here:

Watch our launch video

Read the manifesto

Follow us on X and LinkedIn

The Sazabi philosophy

Sazabi is more than just a tool. It’s also a philosophy. We're taking a radically different approach to observability, centered on three big ideas:

Less is more. Most observability platforms drown you in dashboards and modules that you don’t need. We believe observability needs less UI, not more. Sazabi surfaces exactly the information you need in a simple, beautiful chat interface.

Logs are all you need. The “three pillars of observability” idea is outdated. Sazabi accepts only one kind of telemetry: logs. This simplifies the instrumentation and product experience dramatically.

Monitoring is dead. Creating and maintaining static alerts for a fast-evolving system is a fool’s errand. The future is agentic anomaly detection: AI agents that automatically check your app for issues 24-7.

We came to these beliefs the hard way — after years of building infrastructure and responding to incidents with tools that offered plenty of bells and whistles, but no clear answers when it counted most.

If this way of thinking resonates with you, come build with us.