The Internal Identity & Access Management (I2AM) team is responsible for critical production infrastructure that provides a foundational notion of Identity and strong authentication and authorization controls across Pinterest. Our backend is primarily written in Golang, Python with some C++ while our frontend tools are written in React and TypeScript. We’re looking for a software engineer who will help us build robust tooling to define and evaluate access controls across production infrastructure. A security background is not necessary but ideal candidates will have familiarity with the problems or related spaces, such as Infrastructure or Identity.

What you’ll do:

• Contribute to the technical roadmap for identity and authorization controls for users, services and AI Agents.
• Design, implement, and maintain mission-critical features that will help us deliver robust IAM infrastructure and libraries to our customers.
• Leverage Agentic AI to improve systems and least privilege, while applying judgment and verification to ensure correctness and quality. Improve code quality and system performance using AI Coding Agents.
• As member of the Infrastructure Security team, build performant and resilient AAA (Authentication, Authorization, Auditing) platform controls into various high-traffic services including our AI Agents, online/offline data platforms, databases, service mesh. (Envoy) and other critical infrastructure components.

What we're looking for:

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
• 2+ years of software development experience.
• Experienced in developing features end to end, with preferred experience developing them in distributed systems.
• Experience with critical evaluation and verification of AI-assisted work (e.g., testing, source-checking, data validation, peer review).
• Demonstrated ability to prototype and use AI tooling to improve reliability and quality of day-to-day workflow and system performance.
• High integrity and ownership: you protect sensitive data, avoid over-reliance on AI, and remain accountable for final decisions and deliverables.
• Experience in some of the following areas is a strong plus:
• Identity, Account Security, Authentication/Authorization (OAuth, SAML, RBAC) protocols
• AWS or other public cloud infrastructure, containerization such as Kubernetes 
• Infrastructure provisioning tools (Terraform, Puppet, etc.)
• Familiarity with networking protocols (Application layer)

In-Office Requirement Statement: 

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.
• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country. 

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

#LI-REMOTE

#LI-JT1

Pinterest is seeking an experienced Security Engineer to build and implement detection and response improvements and adapt to emerging threats to protect employees and infrastructure. In this role you will have the opportunity to solve challenging problems and provide a meaningful impact on our overall security posture. We are looking for a candidate with a passion for both security and innovation.

What you'll do:

• Build alerts and automation workflows to improve capabilities to detect and response to external and internal security threats
• Manage our logging pipelines and infrastructure and onboard new logging sources to improve our detection coverage
• Develop and maintain internal tooling to expand and automate team detection and response capabilities
• Respond to alerts generated from our tooling and run incidents as part of an on-call rotation
• Collaborate with cross team partners
• Hunt for previously undetected threats in our environment
• Leverage AI to streamline and enhance the efficiency, accuracy, and coverage of security engineering.

What we’re looking for:

• Bachelor’s degree in Computer Science, Cybersecurity or, a related field or equivalent experience
• Strong knowledge of intrusion detection and incident response with an engineering focus in a modern cloud first environment
• Knowledge of the attacker lifecycle, common attack and detection techniques
• Hands on experience with writing SIEM queries for alerting, response, and threat hunting
• Experience consuming threat intel and applying it to improve detection capabilities
• Familiarity with using multiple sources of telemetry for threat investigations: Eg. EDR, Osquery, Firewall logs
• Understanding of networking technologies and/or network security, basic TCP/IP network fundamentals
• Depth in ideally MacOS internals, or alternatively in Linux/UNIX or Windows internals, persistence mechanisms, privilege escalation techniques
• Scripting or automation experience (e.g., Python, Go, Ruby) for tool development or integration
• Demonstrated ability to use AI to improve speed and quality in your day-to-day workflow for relevant outputs.
• Strong track record of critical evaluation and verification of AI-assisted work (e.g., testing, source-checking, data validation, peer review).
• High integrity and ownership: you protect sensitive data, avoid over-reliance on AI, and remain accountable for final decisions and deliverables.

In-Office Requirement Statement: 

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.
• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country. 

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

#LI-REMOTE

#LI-JT1

Pinterest’s Security team is seeking an experienced Security Software Engineer to help keep our 619 million monthly active users safe from real-world threats. You will build tooling, product enhancements, and work with teams to improve our overall security posture and enhance our secure development lifecycle. We are looking for a candidate with a passion for security and innovation, who will research and develop new solutions to secure our products.

What you'll do:

• Design and build out our rules, processes, and platform for our secure development lifecycle.
• Deliver and review code that is well-documented, tested, and operable.
• Work cross function to architect scalable and secure solutions to a variety of Pinterest’s problems.
• Conduct regular security assessments including design reviews.
• Help rework our existing controls to address increased productivity due to AI and new AI threats.

What we’re looking for:

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
• 5+ years of experience in product security, application security, or security related software engineering role.
• Enthusiasm for the constant fight to ensure security and privacy.
• Proficiency in a dynamic programming language such as Python.

In-Office Requirement Statement: 

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.
• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country. 

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

#LI-REMOTE

#LI-JT1

Sr. Fullstack Software Engineer

Pinterest’s Security Privacy team is seeking a Sr. Fullstack Software Engineer to help architect and implement solutions that protect millions of users by building secure systems across backend and client platforms. You’ll focus on designing and delivering privacy-first infrastructure and services that ensure compliance, scalability, and trust, with upcoming opportunities to collaborate on mobile privacy initiatives that extend these protections to our mobile apps. The ideal candidate brings strong software development experience, expertise in privacy regulations, and the ability to mentor and lead cross-functional initiatives. While mobile development experience is not required, familiarity with or interest in mobile security will be a strong advantage as we continue to expand our privacy focus across all surfaces.

What you’ll do:

• Design and implement scalable solutions that ensure privacy compliance and protect sensitive user data, including data handling and deletion processes.
• Write, review, and maintain code that is well-documented, thoroughly tested, and compliant with security and privacy standards.
• Monitor, identify, and address potential privacy vulnerabilities, leading root cause analysis and applying lessons learned to strengthen systems.
• Work closely with compliance teams, engineers, and stakeholders to align on goals, define success metrics, and implement best practices for security and privacy.
• Implement privacy and security frameworks to Pinterest’s mobile surfaces.
• Drive efforts to resolve and prevent privacy-related incidents, ensuring effective remediation and long-term prevention strategies.
• Conduct training sessions, mentor team members, and champion a culture of privacy and security across Pinterest.
• Thoughtfully leverage AI tools to speed up design, coding, debugging, and documentation, while applying your own critical thinking to validate outputs and explain how you used AI in your workflow.
• Shape our AI-assisted engineering practices by sharing patterns, guardrails, and learnings with the team so we can safely increase our impact without compromising code quality, reliability, or candidate expectations.

What we’re looking for:

• 5+ years of experience in software engineering, with increasing responsibility.
• 1+ years of hands-on experience in privacy and security engineering, or equivalent experience tackling privacy-related challenges.
• Proficiency in a dynamic programming language (e.g., Python, Java, Kotlin, or Swift), with an ability to write clean, maintainable, and secure code.
• 2+ years of Fullstack experience
• Experience tackling technical challenges, with a focus on learning from and adapting to new and ambiguous environments.
• Familiarity with privacy frameworks and ability to integrate privacy requirements into system design and architecture.
• Experience with secure data handling, logging, monitoring, and incident response to identify and mitigate potential risks.
• Collaborative mindset and leadership skills, with ability to mentor team members, foster cross-functional relationships, and contribute to team goals.
• Enthusiasm for tackling complex privacy and security challenges with a strong commitment to creating impactful, user-centric solutions.
• Experience with or interest in mobile development or mobile security, especially in privacy-conscious design for Android or iOS platforms.
• Bachelor’s degree in a related field such as Computer Science, Software Engineering, or a related discipline, or equivalent experience. If you gained experience through different routes (e.g., bootcamps, self-taught programming), you’re welcome to apply.
• Experience using AI coding assistants and agentic tools as a force-multiplier, and equally comfortable solving problems from first principles when those tools aren’t available.

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

In-Office Requirement Statement:

• We let the type of work you do guide the collaboration style. That means we're not always working in an office, but we continue to gather for key moments of collaboration and connection.
• This role will need to be in the office for in-person collaboration 1-2 times/month and therefore can be situated anywhere in the country.

#LI-HYBRID 

#LI-JD1

Pinterest’s Security team (Pinfosec) is seeking an experienced Vendor Security Analyst to conduct assessments of our vendors and help drive vendor and third-party security initiatives to keep our users, employees, and infrastructure safe from third-party security risk. You will have the opportunity to support the improvement of our vendor security program and GRC initiatives and provide meaningful impact in minimizing risk for Pinterest. You’re passionate about security innovation, and able to vet third-party solutions while minimizing employee friction and maximizing productivity.

What you’ll do:

• Perform vendor security assessments in order to minimize risk from third-party services
• Support the Vendor Security lead to Maintain and improve the vendor security program while working closely with Security, Legal, IT and other internal stakeholders
• Ensure vendor security issues are identified, communicated, and remediated to an acceptable level of risk
• Act as the SME for High Priority Vendor Security Reviews (e.g. AI related tooling)
• Interface with other teams and take a leadership role in driving vendor security initiatives
• Manage the MSSP for Vendor Security when the Vendor Security Lead is unavailable
• Act as the Vendor Security SME for the Onspring Risk Register and manage the maintenance and updating of Vendor Security related exceptions
• Support Pinterest’s Security Governance, Risk & Compliance program on an ad hoc basis such as; Be responsible for the monthly review and maintenance of security awareness training metrics, assist in the update of security policies from time to time, assist in the audit evidence gathering for SOC 2 Type 2 compliance as required, assist in the completion of security questionnaires from Pinterest’s advertisers
• You will be required to have a thorough understanding of security concepts, but you will not need to have coding experience

What we are looking for:

• 3+ years experience performing vendor security risk analysis for new and existing vendors
• Experience supporting the design, management, and building of security programs and best practices
• Familiarity with compliance frameworks (e.g. PCI, GDPR, SOC2, ISO27001, NIST CSF)
• Good understanding of various security domains
• Strong sense of ownership and comfortable with autonomy and ambiguity
• Great communicator who is comfortable leading meetings and audit type interviews with vendors
• Bachelor’s degree in a relevant field such as Computer Science, Engineering, or other cognitive function, or equivalent experience

In-Office Requirement Statement:

• We let the type of work you do guide the collaboration style. That means we're not always working in an office, but we continue to gather for key moments of collaboration and connection.
• This role will need to be in the office for in-person collaboration 1-2 times/quarter and therefore can be situated anywhere in the country. 
  
  

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.
  
  

 #LI-HYBRID

#LI-AH2

This role is part of Pinterest’s Corporate Security team and will collaborate closely with engineers to tackle complex enterprise security challenges. You will have the opportunity to design and implement innovative solutions that protect Pinterest’s systems and data. Your work will directly contribute to ensuring the safety and resilience of the company’s enterprise environment.

What you’ll do: 

• Automation & Tooling - Develop scripts, tools, and automated pipelines to streamline vulnerability scanning, incident triage processes. Integrate security tools within CI/CD pipelines.
• Security Architecture & Code Review - Consult and engineer secure-by-design systems. Conduct design and code reviews to identify vulnerabilities, misconfigurations, and security flaws early in the development lifecycle.
• Champion Security Automation Culture: Advocate for and educate team members on secure coding, automation practices, and emerging security technologies.
• Implement Secure Engineering Practices -  Design, develop, and maintain software systems with security best practices integrated throughout the development lifecycle.
• Collaborate with XFN Teams - Partner with security engineers and IT to improve detection and remediation of threats across infrastructure and applications.
• Use AI to accelerate analysis and iteration, while applying judgment and verification to ensure correctness and quality.
• Leverage AI to streamline and enhance the efficiency, accuracy, and coverage of security engineering and review processes.
  
  

What we’re looking for:

• Bachelor’s degree in Computer Science, Cybersecurity or, a related field or equivalent experience.
• 5+ years of experience in corporate security or security related software engineering role.
• Linux/UNIX, macOS or Windows internals with an emphasis on proactive hardening.
• Experience working in conjunction with IT architectural and infrastructure groups to coordinate and implement roadmaps for future scalability, growth, and capacity.
• Fleet management experience (e.g. Puppet, Chef, Terraform or similar).
• Cloud computing experience (infrastructure or security experience both valuable).
• Systems security experience (e.g. hardening a corporate identity environment).
• Demonstrated ability to use AI to improve speed and quality in your day-to-day workflow for relevant outputs.
• Strong track record of critical evaluation and verification of AI-assisted work (e.g., testing, source-checking, data validation, peer review).
• High integrity and ownership: you protect sensitive data, avoid over-reliance on AI, and remain accountable for final decisions and deliverables.
  
  

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.
  
  

In-Office Requirement Statement:

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.
• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country.

#LI-REMOTE

#LI-AH2

This role is part of Pinterest’s Corporate Security team and will collaborate closely with engineers to tackle complex enterprise security challenges. You will have the opportunity to design and implement innovative solutions that protect Pinterest’s systems and data. Your work will directly contribute to ensuring the safety and resilience of the company’s enterprise environment.

What you’ll do: 

• Automation & Tooling - Develop scripts, tools, and automated pipelines to streamline vulnerability scanning, incident triage processes. Integrate security tools within CI/CD pipelines.
• Implement Secure Engineering Practices -  Design, develop, and maintain software systems with security best practices integrated throughout the development lifecycle.\
• Collaborate with XFN Teams - Partner with security engineers and IT to improve detection and remediation of threats across infrastructure and applications.
• Use AI to accelerate analysis and iteration, while applying judgment and verification to ensure correctness and quality.
• Leverage AI to streamline and enhance the efficiency, accuracy, and coverage of security engineering and review processes.
• Grow your skills in an inclusive and encouraging environment
• Learn from supportive, collaborative teammates
• Use modern technologies and tools (including AI)
• Work on real security challenges that protect millions of users and make a real impact from day one

What we’re looking for:

• Linux/UNIX, macOS or Windows internals with an emphasis on proactive hardening
• Demonstrated ability to use AI to improve speed and quality in your day-to-day workflow for relevant outputs.
• Strong track record of critical evaluation and verification of AI-assisted work (e.g., testing, source-checking, data validation, peer review).
• High integrity and ownership: you protect sensitive data, avoid over-reliance on AI, and remain accountable for final decisions and deliverables.
• Bachelor’s degree in Computer Science, Cybersecurity or, a related field or equivalent experience

In-Office Requirement Statement: 

• We recognize that the ideal environment for work is situational and may differ across departments. What this looks like day-to-day can vary based on the needs of each organization or role.
• This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country. 

Relocation Statement:

• This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model.

#LI-REMOTE

#LI-AH