Software Engineer I

Security Engineer - L1

Wayfair’s Product Security Team is responsible for safeguarding the security of development and custom products and features. We engage with hundreds of developers and development teams to review and improve the security of custom developed applications, products, and interfaces. Additionally, we monitor and manage customer security and react to incidents as they arise. We design secure solutions and systems, build trusted relationships with teams across Wayfair and our customers, investigate security incidents, discover and mitigate vulnerabilities, both internal and external. AI is increasingly part of how we operate - we use AI coding assistants to ship security work faster, build LLM-powered automation for triage and detection, and assess the security of Wayfair's own AI-enabled products and features.

What You’ll Do

• Assist in building & deploying security solutions that will be used across the enterprise
• Liaise with development and product teams to develop secure products and features for customers, suppliers, partners, and employees
• Implement ‘Sec’ in DevSecOps model of operations
• Perform penetration testing and code reviews of highly complex services that are used by millions of customers, leveraging AI-assisted tooling to expand coverage and accelerate findings
• Conduct risk analysis and threat modeling, leveraging AI to accelerate analysis and broaden coverage
• Build threat models for AI/LLM-powered features (prompt injection, model abuse, sensitive data exposure through RAG and agents)
• Assist in onboarding applications to web application firewall (WAF), maintain and tune WAF rules
• Triage Bug Bounty reports and coordinate with external hackers as part of Wayfair’s Bug Bounty Program
• Build automations to streamline security workflows and detections, including LLM-powered tooling for triage, code review, report summarization, and vulnerability discovery
• Use AI coding assistants (e.g., Claude, Cursor, Copilot) as a daily multiplier - for writing detection logic, drafting remediation guidance, scripting one-off analysis, and for code reviews.
  
  

What You Have

• Hands-on scripting experience in Python
• Exposure to k8s and cloud platforms (Google Cloud preferred).
• Exposure to securing applications, REST & GraphQL services
• Understanding of secure application development or Secure SDLC
• Understanding of build and release management, CI/CD platforms
• Exposure to dynamic analysis
• Understanding of Authentication mechanisms such as JWT & OAuth
• Experience with utilizing AI assistants (Claude, Cursor, Copilot, or similar) for day-to-day work
  
  

What we’d love to see (but isn’t required)

• Experience securing any of these cloud services platforms - GCP, AWS, Azure
• Comfort using AI coding assistants (Claude, Cursor, Copilot, or similar) as part of day-to-day security work
• Experience building security automation with LLMs - e.g., bug bounty triage, code review assistants, alert enrichment, or report normalization
• Hands-on experience assessing the security of AI/LLM-powered applications - prompt injection, jailbreaks, insecure tool/agent use, RAG data exposure, model abuse
• Familiarity with AI security frameworks such as OWASP LLM Top 10, MITRE ATLAS, or NIST AI RMF
• Relevant security certifications like GCP Professional Cloud Security Engineer, OSCP, OSWE, CKS, GWAPT, GPEN, GSEC
  
  

Wayfair is one of the world’s largest online destinations for the home. Whether you work in our global headquarters in Boston or Bengaluru, or in our warehouses or offices throughout the world, we’re reinventing the way people shop for their homes. Through our commitment to industry-leading technology and creative problem-solving, we are confident that Wayfair will be home to the most rewarding work of your career. If you’re looking for rapid growth, constant learning, and dynamic challenges, then you’ll find that amazing career opportunities are knocking.

We’re proud to be an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or genetic information.

Assistance For Individuals With Disabilities

Wayfair is fully committed to providing equal opportunities for all individuals, including individuals with disabilities. As part of this commitment, Wayfair will make reasonable accommodations to the known physical or mental limitations of qualified individuals with disabilities, unless doing so would impose an undue hardship on business operations. If you require a reasonable accommodation to participate in the job application or interview process, please let us know by completing our Accomodations for Applicants form.

Need Technical Assistance?

For more information about applying for a career at wayfair, visit our FAQ page here.

About Wayfair Inc.

Wayfair is one of the world’s largest online destinations for the home. Whether you work in our global headquarters in Boston, or in our warehouses or offices throughout the world, we’re reinventing the way people shop for their homes. Through our commitment to industry-leading technology and creative problem-solving, we are confident that Wayfair will be home to the most rewarding work of your career. If you’re looking for rapid growth, constant learning, and dynamic challenges, then you’ll find that amazing career opportunities are knocking.

No matter who you are, Wayfair is a place you can call home. We’re a community of innovators, risk-takers, and trailblazers who celebrate our differences, and know that our unique perspectives make us stronger, smarter, and well-positioned for success. We value and rely on the collective voices of our employees, customers, community, and suppliers to help guide us as we build a better Wayfair – and world – for all. Every voice, every perspective matters. That’s why we’re proud to be an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, genetic information, or any other legally protected characteristic.

Your personal data is processed in accordance with our Candidate Privacy Notice (https://www.wayfair.com/careers/privacy). If you have any questions or wish to exercise your rights under applicable privacy and data protection laws, please contact us at dataprotectionofficer@wayfair.com.

---