Software Engineer, Enterprise Security

Warp is building an agentic development environment and infrastructure platform that helps developers and engineering teams build, deploy, and manage software with AI agents. The Software Engineer, Enterprise Security will design and ship security capabilities across identity, authorization, agent permissions, auditability, data protection, and enterprise controls while owning major security-sensitive product areas end-to-end.

Responsibilities:

• Design and build enterprise security capabilities across areas like identity, authorization, permissions, auditability, policy, data controls, and administration
• Define the security model for agentic software development, including how agents access code, tools, credentials, customer data, and other sensitive resources
• Own major security-sensitive product areas end-to-end, from understanding customer needs and defining the right product behavior through architecture, implementation, launch, and iteration
• Partner with Product and GTM to understand enterprise security requirements and translate them into product investments that unlock adoption without compromising Warp's usability
• Set technical direction for enterprise security at Warp, identifying the highest-leverage capabilities and architectural investments as our product and enterprise business grow
• Bring security expertise to the broader engineering organization, helping teams make good architectural decisions around authentication, authorization, isolation, data protection, and other security-sensitive systems

Requirements:

• 5+ years of professional software engineering experience, ideally building complex production systems in a fast-paced product or startup environment
• Strong software engineering fundamentals and a track record of personally designing, building, and shipping significant product or platform capabilities
• Experience building security-sensitive enterprise features or systems, such as authentication and authorization, RBAC/ABAC, SSO/SCIM, permissions and policy systems, audit logging, tenant isolation, secrets management, encryption, or data controls
• Strong security intuition and the ability to reason deeply about trust boundaries, permissions, credentials, data access, and how systems can be misused
• Strong product judgment: you can understand what enterprise customers are trying to accomplish and translate security requirements into pragmatic, usable product experiences
• Ability to lead ambiguous technical areas as a senior IC: identify the problem, develop an approach, align stakeholders, and drive implementation through completion
• Clear, thoughtful communication across engineering, Product, GTM, and technically sophisticated customers
• Comfortable operating with significant ownership and ambiguity—you default to figuring things out rather than waiting to be told what to do
• Experience as a Senior or Staff engineer owning enterprise security, identity, authorization, trust, or governance capabilities at a developer-tool, AI, cloud, security-product, or enterprise SaaS company
• Experience building products used by security teams, CISOs, or enterprise administrators, giving you firsthand understanding of how sophisticated organizations think about security
• Experience working directly with enterprise customers or GTM teams to turn customer security requirements into product capabilities
• Experience securing AI or agentic systems, particularly around scoped permissions, untrusted code execution, sandboxing/isolation, secrets and credentials, tool access, approval flows, or access to customer data
• Experience building security products or developer-facing security systems at companies such as Wiz, Snyk, Semgrep, Cloudflare, or similar
• Experience with application security, threat modeling, vulnerability response, or security incidents. These are valuable complementary skills, but this role's primary focus is building product