Security Engineer

Security engineering across Cognition's two agent products. The surface is an unusual one: Devin executes arbitrary user code across millions of sandboxed sessions and Windsurf runs inside developer environments, so both hold customer code, credentials and infrastructure access. The posting names the work as hardening the sandboxing, isolation and runtime controls that let an agent execute untrusted code over long-horizon tasks; threat modelling, secure design review and vulnerability management across both products and the infrastructure beneath them; building internal secrets, identity, access and dependency tooling; and running the detection pipeline and incident response. It is explicit that this is a code-writing role rather than a reviewing one, asking for Python, Rust or Go, comfort owning large systems codebases, and Kubernetes and multi-tenant compute security.