Security Engineer

We are Rokt, a hyper-growth ecommerce leader. Rokt is the global leader in ecommerce, unlocking real-time relevance in the moment that matters most. Rokt’s AI Brain and ecommerce Network powers billions of transactions connecting hundreds of millions of customers, and is trusted to do this by the world’s leading companies.

We are a team of builders helping smart businesses find innovative ways to meet customer needs and generate incremental revenue. Leading companies drive 10-50% of additional revenue—and often all their profits—from the extra products or services they sell. This economic edge unleashes a world of possibilities for growth and innovation.

The Rokt engineering team builds best-in-class ecommerce technology that provides personalized and relevant experiences for customers globally and empowers marketers with sophisticated, AI-driven tooling to understand consumers better. Our bespoke platform handles millions of transactions per day. It considers billions of data points which give engineers the opportunity to build technology at scale, collaborate across teams, and gain exposure to a wide range of technology.

At Rokt, we practice transparency in career paths and compensation. At Rokt, we believe in transparency, which is why we have a well-defined career ladder with transparent compensation and clear career paths based on competency and ability. Rokt’stars constantly strive to raise the bar, pushing the envelope of what is possible.

We are looking for Security Engineer

Target Total Compensation: $245,000 - $260,000, including a fixed annual salary of $170,000 - $185,000, employee equity grant, and world-class benefits.

Equity grants are issued in good faith, subject to company policies, board approval, and individual eligibility.

Rokt is looking for a Security Engineer with a strong foundation in threat intelligence, detection, response, and forensics. In this role, you will be at the forefront of protecting the platform and customer data that are fundamental to maintaining trust and delivering a smarter, faster, and better e-commerce experience. You have a product builder's mindset and will help improve our capabilities to meet the threat of AI-based threats.

You will be responsible for providing the core capabilities of our threat management and incident response program. You will develop and maintain tools to provide threat awareness and intelligence, security incident and event management (SIEM), and security automation and response (SOAR), adapting them to address the modern threat of harmful, autonomous, and intelligent AI agents. You will establish an agentic SOC to ensure potential compromises or bad actors in our environment are quickly identified, contained, and eradicated on a 365/7 basis with minimal human effort. By leveraging AI code generation and workflow tools, you will scale threat intelligence gathering and ensure threat catalogues are effectively maintained and appropriate mitigating controls are put in place.

Collaboration is central to this position. You will work closely with system and product owners, Legal and Public Relations teams, and the broader Senior Leadership team to ensure our detection and response capabilities are effective across the business. You will translate incident detection and response requirements into practical and scalable solutions and will ensure all key stakeholders are aware of their role and responsibility and appropriately trained to respond to incidents.

As a Security Engineer at Rokt, you will pioneer how we use ‘good’ AI to protect against ‘bad’ AI. You will work alongside top-tier developers, platform teams, and governance professionals. This is a high-impact builder role for someone ready to lead the future of application security.

Responsibilities 

• Develop AI-Driven Security Solutions — Design and implement log management capabilities, detection rules and behaviour baselines, security event triage, incident response and forensic workflows, and associated reporting. You will utilize AI workflow tools to provide 365/7 response with consistency.
• Automate Threat Assessments — Leverage AI to automate threat intelligence gathering, maintain catalogues of threat actors, tactics, techniques, and procedures as they apply to our business processes and technologies, identify possible mitigations, and ensure we are prepared and ready to respond to incidents.
• Subject Matter Expertise —You will provide deep expertise in application security threats, particularly in modern API-based architectures and Kubernetes-based operating environments. You will address security challenges associated with detecting and responding to actors empowered with Large Language Models (LLMs) and Agentic AI.
• Collaborate Across Teams — Work closely with system and product owners, Legal and Public Relations teams, and Se