Senior Security Engineer

Location: New York City

Department: Product & Engineering

What Do We Do?

Triple Whale is the AI operating system built for modern commmerce. We help you see what's actually working in your business, what's not, and what to do next. Then we take action for you — pausing the underperforming ad, generating the next batch of creative, flagging the inventory risk before it hurts your bottom line.

We pull every signal in your business into one place, and put it on the most trusted measurement foundation in the industry. And on top of that, we give you the only AI harness in commerce — Moby — letting you tap any LLM you want, grounded in the full context of your business. Moby doesn't just surface insights, it executes decisions for you, with automations that make the rest of your stack smarter.

The result: more than 65,000 brands like Kitsch, OUAI, and True Classic turn mountains of complex data into actions that actually grow profit, at a speed and scale that is not humanly possible.

What You're Applying For

Triple Whale is a data and AI platform serving thousands of ecommerce brands. We handle sensitive merchant data and credentials, making security core to our product.

As a Senior Security Engineer, you’ll design and build security controls across our cloud infrastructure, applications, and AI systems. You’ll work alongside the Infrastructure and engineering teams to turn security requirements into practical protections that support fast development.

Stack: GCP, GKE, TypeScript, Pulumi, Cloud SQL, MongoDB, ClickHouse, and more.

What You’ll Do 

• Design and implement controls for workload identity, least-privilege IAM, secrets management, network isolation, and egress.
• Secure AI agents and code execution environments through sandboxing and clear access boundaries.
• Conduct security reviews of services, systems, and architecture, and work with engineers to implement fixes.
• Perform internal penetration tests to identify vulnerabilities and validate security controls.
• Build security monitoring, detection rules, and alerting across our infrastructure and applications.
• Build security into development workflows, CI/CD, infrastructure as code, and software dependencies.
• Support incident investigations and address underlying security weaknesses.

What You’ll Bring

• Strong hands-on experience in cloud, infrastructure, or application security.
• Deep understanding of Kubernetes, IAM, networking, and cloud security; GCP experience preferred.
• Strong TypeScript development skills and experience building security tooling and automation.
• Experience with security reviews, threat modeling, penetration testing, and vulnerability remediation.
• Practical judgment and the ability to work independently alongside engineering teams.

Join Us in Making Waves

If you’re looking for more than just a job and want to be part of a movement reshaping the future of Ecommerce, Triple Whale is the place for you. We’re on the lookout for driven, curious, and creative individuals ready to thrive in a fast-paced environment.

Referred? Got here thanks to a friend? Splash some gratitude their way! They'll need to submit your application through our referral system to make it official.

#LI-Remote