Junior Security Engineer

1Password is hiring a Junior Security Engineer for its Application Security team. The role focuses on building and maintaining security tooling, supporting secure product development, and reducing security risk across the software development lifecycle.

Responsibilities:

• Work within a small team of Application Security Engineers focused on minimizing security risk across our SSDLC
• Work with cross functional partners across Security, Product Engineering, Marketing, CX and more on the security parameters of new features across 1Password’s product suite
• Design, build, integrate and scale new agentic AI capabilities to enable secure product development activities
• Enhance and maintain existing security tools in a variety of areas including static analysis, dynamic analysis, code scanning, and more
• Develop and maintain comprehensive dashboards and reporting metrics around our security risk program, tailored to different audiences (technical, non-technical, compliance, senior leadership, etc.)

Requirements:

• You have 0-2+ years of experience in software development
• You have a passion and curiosity for security engineering, including but not limited to topics of secure coding, pentesting, vulnerability analysis, security design and architecture
• You have strong experience, demonstrated through project work or real world experience, leveraging agentic AI capabilities to accelerate security workflows, automate repetitive tasks, or enhance detection and remediation efforts
• You have experience with internal tool development and engineering enablement
• You have a strong foundational understanding of software development principles, and are comfortable reading and writing code
• You work well in a team environment with positive communications amongst a variety of technical and non-technical stakeholders
• You're adaptable and resilient, thriving in fast-paced environments with shifting priorities
• Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly
• Experience conducting security code reviews, design architecture guidance, threat modelling
• Practical or hands-on experience with web application security topics, including but not limited to topics in OWASP Top 10