Full time • San Francisco, CA • $180K – $240K
Parameter builds AI agents that do offensive security work. Our agents run autonomous penetration tests against production applications and cloud environments, finding IDORs, broken access control, XSS, and infrastructure misconfigurations that scanners miss and that human pentest firms only look for once or twice a year.
We are not a theoretical security company. Our team has responsibly disclosed real, high-severity vulnerabilities to well-known technology companies, and our findings are the front door to most of our customer relationships.
Our agents run for hours, in parallel, against live customer infrastructure, and they are expensive when they run badly. You own the platform underneath them: the orchestration, the isolation between one customer's engagement and the next, and the difference between a run that fails loudly and one that quietly bills us for a weekend.
The title points at where you'll spend most of your time. Expect the rest of the week to go wherever the work is: agent systems one day, the product the next, a customer call or a report that has to go out after that. We are small enough that everyone works across every product, and we hire people who want that.
What you'll do
Own the infrastructure the agents run on: orchestration, scheduling, isolation between customer environments, and the blast radius when a run goes wrong
Run our GCP footprint, including networking, IAM, secrets management, and the egress paths agents test through
Keep long-running Temporal workflows durable across restarts, provider rate limits, and model outages
Build the deployment and observability story: CI/CD, tracing across multi-hour agent runs, and cost attribution per engagement
Harden the platform we sell security from. Our own infrastructure goes through every customer's security review
What we're looking for
4+ years in infrastructure, platform, or SRE work on production systems someone got paged for
Deep GCP or AWS: networking, IAM, container orchestration, and the failure modes of each
Strong TypeScript, and fluent in Terraform or an equivalent
You've run workloads you don't fully trust and know how to contain them. Multi-tenant isolation is the job, not a footnote
Bonus: security engineering background, or you've been on the receiving end of a cloud incident and fixed the class of problem afterward
Interview process
Intro call with a founder (30 minutes)
Technical deep dive on your past work (60 minutes)
Paid work trial or take-home, scoped to roughly one day
Onsite in San Francisco with the team
References and offer
Stack
TypeScript · GCP · Terraform · Temporal · Docker · GitHub Actions · Linear · Graphite
We move quickly. Our target is an offer within two weeks of first contact. Small team, high trust, extremely fast. If you want to see your work in front of customers within days, this is that.
This role is onsite in San Francisco. You must be authorized to work in the US; we are not able to sponsor visas at this time.