Asks for

The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Have deep intuition on application security, software architecture, and how vulnerabilities emerge in real systems. You are comfortable finding issues yourself, but care more about eliminating vulnerability classes through better libraries, frameworks, and defaults.”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Strong production coding skills in Python, Go, TypeScript, or similar languages”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Strong production coding skills in Python, Go, TypeScript, or similar languages”
The ad says“Have deep intuition on application security, software architecture, and how vulnerabilities emerge in real systems. You are comfortable finding issues yourself, but care more about eliminating vulnerability classes through better libraries, frameworks, and defaults.”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”
The ad says“Strong production coding skills in Python, Go, TypeScript, or similar languages”
The ad says“Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation”

About us

Parallel is a web infrastructure company. Our products are used by leading businesses in sales, marketing, insurance, and coding to build best-in-class AI agents with flexible and powerful programmatic access to the web.

We've raised $230 million from Kleiner Perkins, Sequoia, Index Ventures, Spark Capital, Khosla Ventures, First Round, and Terrain to build the web for AIs. We're currently valued at $2 billion and we're forming a world-class team of engineers, designers, marketers, sellers, researchers, and operational experts to achieve our mission.

The role:

You will build and operate the security systems that let Parallel ship quickly without creating avoidable risk. You will work across application security, secure defaults, AI-assisted security tooling, and the unique attack surface of agentic systems that consume untrusted web content. You will fix real vulnerabilities when they appear, then change the underlying systems so the same class of issue is harder to introduce again.

You will also help define how security fits into the development process: building reusable patterns for authentication, authorization, data handling, and outbound access, designing controls for enterprise customers, and ensuring security review happens as part of how software gets built rather than as a separate process at the end.

About you:

Have deep intuition on application security, software architecture, and how vulnerabilities emerge in real systems. You are comfortable finding issues yourself, but care more about eliminating vulnerability classes through better libraries, frameworks, and defaults.

You still like to write production code and have strong opinions on where current AI models are useful for security work and where they mostly create noise. You are comfortable operating independently, prioritizing the highest-leverage problems, and working directly with both engineers and customers.

You might be a good fit if you have:

Significant software engineering experience, including several years focused on product or application security
Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation
Built frameworks, libraries, or secure defaults that reduced entire classes of vulnerabilities across a codebase or engineering organization
Experience building security tooling using current AI models, such as automated code review, threat modeling, triage, agent harnesses, or evaluation systems
Experience securing systems that process untrusted inputs, especially LLM or agentic systems
Ability to work independently as the primary security owner and make clear prioritization decisions
Strong production coding skills in Python, Go, TypeScript, or similar languages
Experience with GCP, Kubernetes, security research, open source security tooling, or conference talks is a plus

Life at Parallel

Our team works fully in-person, between our Palo Alto HQ and San Francisco office. We’re a flat, talent-dense organization dedicated to solving technical and creative problems.

We seek like-minded individuals who share our passion for applying science, creativity, and consistency to big and complex problems with equally big outcomes. These are our values:

Own customer impact: It’s on us to ensure real-world outcomes for our customers.
Obsess over craft: Perfect every detail because quality compounds.
Accelerate change: Ship fast, adapt faster, and move frontier ideas into production.
Create win-wins: Creatively turn trade-offs into upside.
Make high-conviction bets: Try and fail. But succeed an unfair amount.

Compensation & benefits

Competitive salary
Generous equity
Visa sponsorships
401K plans
Daily lunch & office snacks
Dinner at the office
Unlimited vacation
Caltrain pass reimbursement