Confluent - Staff Security Engineer at IBM
San Francisco, CA
—
Aug 17, 2026
San Francisco, CA
Sep 25, 2026
What this job asks for AI summary
A Staff Application Security Engineer role at Confluent (under IBM Software), responsible for defining and advancing application security architecture across on-premises products and cloud services. The position involves leading threat modeling, security design reviews, and security automation tooling for large-scale distributed systems, while acting as a strategic partner to Engineering and Product leadership. Well-suited to a deeply technical security practitioner who can both architect solutions and influence organizational security culture.
Staff level · 10+ years · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 20, 2026. It is a model, not a headcount.
Why we read it this way (7)
No work location is specified in the posting — CBSA and state fields are left blank. The role may be remote or at an unspecified Confluent/IBM office.
The SOC classification is Medium confidence: the role's primary work is security analysis, architecture, and threat modeling (15-1212), but a substantial portion involves building security automation tooling in Go/Python/Java, which pulls toward Software Developers (15-1252).
Go, Python, and Java are listed as a single interchangeable requirement ('Experience in Go, Python, or Java'); Go is used as the primary name with the others in alternatives.
The preferred qualification of 12+ years (vs. the required 10+) is noted; the overall years minimum reflects the hard-required minimum of 10.
LLMs appear in the required section framed as 'Passionate about applying AI and LLMs…'; this is firm enough language within a required-qualifications block to treat as a hard gate, though the 'passionate about' framing is softer than typical.
No compensation range is disclosed in the posting.
Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): secure software design, security automation.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.