Security Engineer, IrukaDark (Desktop AI Product) & High-Traffic Platform

Compensation: $130k – $150k • No equity

About IrukaDark:

IrukaDark is a desktop AI assistant built for the small but constant tasks that slow down daily PC work.

With a simple shortcut, users can instantly summarize, translate, rewrite, proofread, understand copied text, organize notes, and process information without breaking their workflow.

Unlike long-running autonomous AI agents, IrukaDark is designed as a “Super-Sub AI”: fast, lightweight, always close to the user, and focused on helping people think, read, write, and work faster in the moment.

As IrukaDark expands globally, we are building a secure and scalable AI product that can support hundreds of millions of monthly requests, events, and user interactions. Security, privacy, reliability, and operational excellence are core parts of the product.

We are looking for a security engineer who can help us build and operate a trustworthy AI product at global scale.

About the Role

We are looking for a hands-on security engineer who can work across product security, application security, cloud security, AI security, privacy, and high-traffic operations.

This role is not limited to writing security policies or reviewing checklists. You will help design, review, and improve the systems that protect user data, AI workflows, APIs, infrastructure, logs, authentication, and real-time product operations.

You will work closely with the engineering and product teams to build security into the product while keeping the user experience fast and smooth.

This is intended for those who have experience using IrukaDark as a user. Without the user's perspective, it is impossible to develop excellent UX.

Responsibilities

・Review the security architecture of the IrukaDark desktop app, backend APIs, and cloud infrastructure
・Design security systems that can support hundreds of millions of monthly requests and events
・Identify risks related to local data, clipboard access, screen context, AI prompts, logs, API calls, and external integrations
・Improve authentication, authorization, session handling, API security, and abuse prevention
・Support secure integration with AI APIs and external services
・Design safe data handling policies for sensitive user information
・Improve secrets management, key handling, and secure configuration
・Build and improve vulnerability management processes
・Support monitoring, alerting, incident response, and post-incident reviews
・Review dependencies, supply chain risks, and deployment pipelines