Software Engineer Product Security
ArenaVisit Arena website
Arena is a community-powered AI evaluation platform where people compare frontier-model outputs and vote, generating human-preference data and public leaderboards.
San Francisco, United States
Funding history
About Arena
Arena Intelligence, Inc. operates Arena, formerly LMArena and previously known as Chatbot Arena. Its platform measures real-world AI model performance through user comparisons, votes, leaderboards, and agentic evaluation.
Skills
About the Role
You will design and ship production security code across authorization, identity, API, browser, privacy, and data-lifecycle systems. You will build security patterns and telemetry, lead threat modeling, implement secure integrations and migrations, and deliver reversible security-sensitive changes.
Requirements
- 6+ years of software or security engineering experience building production systems at scale
- Recent hands-on production engineering experience
- Code-level application and API security expertise
- Proficiency in a modern backend language
- Postgres data modeling, querying, and production migration experience
- Knowledge of HMACs, secure random generation, and key and secret rotation
- Experience securing AI, agentic, or LLM-backed production systems, or willingness to develop this expertise
- Multi-tenant system experience with strict isolation requirements
- Threat modeling and secure architecture design experience
- Ability to translate legal and policy requirements into working systems
- Clear cross-functional communication
Responsibilities
- Design and ship authentication, authorization, and multi-tenant isolation code
- Build account, session, device, and credential lifecycle systems
- Solve security problems for AI, agentic, and tool-use surfaces
- Implement privacy-preserving identifiers and data retention, deletion, and minimization controls
- Emit durable and queryable security-relevant product events
- Ship security-sensitive request paths, integrations, data models, telemetry, migrations, and rollout controls
- Integrate third-party security and trust services with conservative failure behavior
- Own application security across product APIs and browser surfaces
- Build security libraries, middleware, tests, and platform patterns
- Lead threat modeling and implement fixes in the codebase
Benefits
- Equity
- Medical benefits
- Dental benefits
- Vision benefits
- Health and wellness support programs
