[Remote] Senior Infrastructure Security Engineer

Note: The job is a remote job and is open to candidates in USA. Dropbox is a company focused on simplifying the way people work together through innovative cloud-based solutions. The Senior Infrastructure Security Engineer will safeguard Dropbox's digital ecosystem by designing and implementing security controls for AI and agentic infrastructure, while collaborating with cross-functional teams to enhance security posture.ResponsibilitiesDesign, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure, including model gateways, inference services, vector stores, retrieval systems, and supporting cloud and Kubernetes platformsImplement least-privilege and secure-execution patterns for AI agents, including per-tool authorization, sandboxing, human-in-the-loop approvals for high-impact actions, and separation of policy validation from executionLead security implementation for AI tool and agent connectivity layers, including MCP gateway deployments, with controls for OAuth-based authorization, scope minimization, token audience validation, origin validation, replay protection, and secure isolation between trusted and untrusted tool domainsDeploy, build, and/or operate security infrastructure solutions to help scale and raise the security bar for Dropbox’s on-prem and cloud infrastructureAutomate security controls using scripting to eliminate redundant work and minimize need for human involvementCollaborate with cross functional teams and lead security initiatives to influence product decisions and enhance security postureSkills9+ years of Security experience or related industry experience, demonstrating impactful contributions to security strategiesBachelor's degree in Computer Science, Information Security, or related field, or equivalent experience, with coding proficiencyExperience securing LLM, RAG, or agentic AI systems in production, with hands-on implementation of controls for prompt injection, sensitive-data disclosure, excessive agency, data or model poisoning, and AI supply-chain riskExperience designing identity and authorization for non-human workloads and agents using technologies such as SPIFFE/SPIRE, OAuth 2.1 or OIDC, AWS IRSA, Google Workload Identity Federation, Azure managed identities, or equivalent patternsIntegrate adversarial testing and release gates for AI systems into CI/CD, including regression coverage for prompt injection, tool abuse, memory poisoning, approval bypass, and multi-agent escalation scenariosSolid knowledge of Linux fundamentals including system administration, security, networking, scripting, and troubleshootingProficiency using one or more scripting or high-level languages to automate tasks, manipulate data, or build small systems e.g. Bash, Python, Go, Rust, Ruby, NodeJS, C/C++, JavaExperience securing MCP-based systems or similar AI agent and tool protocolsExperience with multi-agent security controls such as trust boundaries, signed inter-agent messaging, and circuit breakersFamiliarity with NIST AI RMF, NIST SP 800-218A, MITRE ATLAS, CSA AICM, and OWASP LLM and agentic security guidanceExperience with security tools such as Teleport, CrowdStrike, Proofpoint, IPS/IDS, SIEM or SOARCertifications such as CISSP, CISM, or equivalentCompany OverviewDropbox is a smart workspace company that provides secure file sharing, collaboration, and storage solutions. It was founded in 2007, and is headquartered in San Francisco, California, USA, with a workforce of 1001-5000 employees. Its website is https://www.dropbox.com.Company H1B SponsorshipDropbox has a track record of offering H1B sponsorships, with 13 in 2026, 121 in 2025, 105 in 2024, 103 in 2023, 166 in 2022, 197 in 2021, 157 in 2020. Please note that this does not guarantee sponsorship for this specific role.