Security Engineer, AppSec Tapestry

About Tapestry

Tapestry is Alphabet's moonshot for the electric grid, working at the frontier where energy's complexity meets AI's potential. We were born at X, the innovation lab responsible for breakthrough technologies like Waymo, Verily and Google Brain.

To keep pace with humanity's growing energy needs, the world needs a grid that is visible and understandable. We provide that clarity by building advanced, AI-enabled analytical and planning tools that allow the entire energy ecosystem to plan smarter, move faster, and operate more efficiently-ensuring electricity remains reliable and affordable for everyone.

This is a global effort. Tapestry is proud to support partners in the U.S., U.K., Chile, New Zealand, Australia and Brazil as they build a cleaner, more resilient energy future. 

Joining Tapestry allows you to do the best work of your life as part of a multidisciplinary team of experts in AI, energy systems, software engineering and product design-all collaborating to reshape energy on a global scale. If you want to tackle problems that matter and build tools with real impact, we would love to meet you. Learn more about our team and our mission here.

About the role:

As an Application Security Engineer, you will integrate security design principles directly into the product development lifecycle. You will work across the entire Tapestry platform, helping the team design and implement secure-by-default software architectures. You will sit with engineering teams to perform deep architectural reviews and build security automation that protects our source code integrity and system availability.

This is an opportunity to design and scale security engineering foundations that empower teams to move quickly without compromising safety or system integrity.

How you will make 10X Impact:

• Design and implement robust security automation and tooling to secure the "code-to-cloud" stack, including GitHub and CI/CD pipelines.
• Partner with Product, Legal, and Engineering to lead deep architectural reviews and launch assessments for all product features.
• Drive the implementation of secure code practices and developer-centric security guardrails across the energy domain.
• Interface with external partners to refine technical security requirements for Energy Sector infrastructure integrations.
• Navigate ambiguity to solve complex security problems at scale, ensuring safety is a core component of our engineering DNA.

What you should have:

• Bachelor's degree in Computer Science, Software Engineering, or related field.
• 5+ years of experience building enterprise-grade complex software systems with a focus on Application Security.
• Proficiency in at least one major language (Go, Java, or Python) to develop and deploy security tooling.
• Experience with secure SDLC, including automated code analysis (SAST/DAST), secret scanning, and vulnerability management.
• Ability to work effectively with cross-functional teams of engineers, scientists, and PMs to implement technical security controls.

It'd be great if you also had one or more of these:

• Experience securing high-scale applications on Google Cloud Platform (GCP).
• Knowledge of software-defined network defense and zero-trust security models.
• Experience working in a startup/early-stage company with rapidly changing requirements.

Our values

• Take charge: We take initiative and own outcomes that move the mission forward.
• Transform with purpose: We build solutions that solve real problems and create meaningful impact.
• Be a Tapestry, not a thread: We collaborate across diverse skills and perspectives to achieve more than we can individually.
• Always fine-tune: We stay curious, seek feedback, and refine our understanding as we learn.
• Stay grounded: We listen openly, value different perspectives, and stay focused on what matters most.

What we offer

A culture that supports growth, ownership, and meaningful impact, along with:

• Competitive salary and equity
• Medical, dental, and vision coverage
• Generous PTO and flexible hybrid work model
• 401(k) with employer contribution
• Professional development
• The ability to work on important real-world problems within an Alphabet-backed environment

The US base salary range for this full-time position is $147,000 - $255,000 + bonus + equity + benefits. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits.