Senior Security Engineer

Every breach, every failed audit, every new hire stuck in onboarding purgatory traces back to the same question: who has access to what — and should they?

Identity is where modern companies break. Too much access leaks data. Too little grinds the business to a halt. Lumos is the industry's first Autonomous Identity Platform — software that doesn't just surface access risk, but acts on it. We started with a self-service AppStore and grew into the critical infrastructure connecting apps, identities, and data for GitHub, MongoDB, Mars, Pinterest, Anduril, Intercom, Roku, and Netskope. At the center is Albus, our AI agent for identity — mining roles, approving access, and catching the drift humans miss.

You'll ship work that thousands of IT and security teams touch every day. You'll own problems without playbooks, because the category is being redefined in real time — by us.

Why Lumos?

• 🚀 Jump on a rocketship. Since launching out of stealth in April 2022, we've grown from 20 to ~130 Alchemists and raised over $65M from a16z, Scale, Neo, Greg Brockman (President at OpenAI), and Phil Venables (CISO at Google).

• ⭐ Customers love us — and so does the industry. Named a Strong Performer in the 2026 Gartner Voice of the Customer for IGA — 4.7/5, with 96% of reviewers saying they'd recommend us. Our customers cut time-to-access by 98%, slash IT tickets by 72%, and eliminate excess privilege at scale.

• 🏆 A culture worth joining. Three years running on Forbes' Top 100 Best Startup Employers in America (2024, 2025, 2026) — measured on culture, retention, growth, and job creation. That's our Alchemists, not our marketing. See what we live by here.

As a Senior Security Engineer at Lumos, you’ll shape the identity platform thousands of IT and security teams rely on to protect their data. You’ll build the security foundations every Lumos product runs on and be a trusted voice when our largest customers ask how we keep them safe.

##

✨ Your Responsibilities

• Design and ship core security platform systems in the Lumos codebase, such as request context propagation across services, scoped API tokens, our authorization service, and decoupling authentication from synced identities.

• Lead multi-sprint security projects end to end, coordinating with engineers on other teams to get them delivered.

• Run security architecture reviews and threat models for new products (for example our MCP Governance gateway and on-device policy checks) before they scale, and turn findings into tracked, prioritized work.

• Drive least-privilege access to our own production systems (databases, data pipelines, AWS IAM, secrets).