# Member of Technical Staff - Workforce Security at Black Forest Labs

Black Forest Labs is hiring a Member of Technical Staff - Workforce Security. It pays $180k-$225k a year and Level rates it Works on AI ●●●○; you can [apply on Black Forest Labs](https://jobsbylevel.com/go/033dcc86-ec5e-42c3-ba8b-b4922a9096a6?utm_medium=ai-agent).

AI Level 3, AI centrality 65 out of 100. San Francisco (United States).

## Details

- Company: [Black Forest Labs](https://jobsbylevel.com/companies/black-forest-labs)
- AI level: AI Level 3 (score 65 out of 100)
- Location: San Francisco (United States)
- Salary: $180k-$225k
- Posted: November 15, 2026
- Apply: https://jobsbylevel.com/go/033dcc86-ec5e-42c3-ba8b-b4922a9096a6?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=member-of-technical-staff-workforce-security-at-black-forest-labs-374bc5

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/member-of-technical-staff-workforce-security-at-black-forest-labs-374bc5

## Description

About Black Forest Labs We’re the team building the foundational layer for visual intelligence: multimodal models trained jointly on images, video, audio, and action to see, generate, and understand the world. Our founding team pioneered latent diffusion and Stable Diffusion, the breakthroughs that made generative AI accessible to millions. With FLUX, we're pushing into generative media at scale, machines that act in the physical world, and emerging applications in computer use. Our FLUX models top public benchmarks and run in production in some of the world's biggest platforms. We're a small, fast growing research lab competing with the largest companies in the world. From our labs in Freiburg to San Francisco, we're building what comes next. Why This Role We develop AI models and run the infrastructure on which those models are trained, deployed, and served to customers. We're looking for an experienced, hands-on security engineer to protect how our staff work: the accounts they sign in with, the devices they use, the third-party tools they rely on, and the agents they delegate work to. You'll work closely with IT, which operates our employee services and devices. This is an engineering role: you'll spend your time building tools and automations, designing practical controls, investigating escalations, and shipping changes. What You’ll Work On These are the areas this role draws from; you're not expected to cover them all at once: Identity and access. Strengthen how staff authenticate and what they can reach: single sign-on coverage, phishing-resistant authentication, and access provisioning and revocation that stay reliable and complete as people and tools change. Design scoped, short-lived credentials for the tools and agents that act on staff's behalf, and improve our ability to detect credential misuse. Endpoint security. Work with IT on device trust, hardening, and visibility across our fleet. Find practical ways for engineers and researchers to install what they need without introducing unnecessary risk. AI agents and staff tooling. Help staff use agents and AI-powered tools productively and safely. Review the threat models, permissions, and data flows of tools staff build or adopt, including coding agents, desktop assistants, browser extensions, and MCP servers. This includes how staff supervise and stay accountable for delegated actions, and the audit trails that make agent activity reviewable. Build sandboxes, credential patterns, and guardrails that make the secure path the convenient one. Third-party tool security. Define a scalable security review for the tools staff use day to day, and work with IT, which owns procurement and provisioning, to build security checks into how tools are onboarded and offboarded. Maintain a current picture of which tools can reach company code, credentials, and customer data as tools are added and retired. Visibility and response. Make sure identity, endpoint, and SaaS telemetry is collected and usable. Investigate escalations and incidents in these areas, verify that we can contain a compromised account or device quickly, and turn findings into lasting fixes. What We’re Looking For Strong experience in identity and access security and endpoint security. Hands-on experience administering an identity provider and a device-management platform. Practical understanding of OAuth, OIDC, SAML, secrets handling, and authorization design. You can trace how an application obtains and uses credentials and find where access controls can be bypassed. Hands-on engineering ability. You can read unfamiliar code, inspect how an app talks to APIs, and write the automation and tooling that replace manual processes. Experience using LLMs and agents in your own work, along with a clear-eyed view of where they help, where they don't, and how they can be attacked or misused. Good security judgment. You can distinguish meaningful risks from theoretical ones and apply controls in proportion to the risk.

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/member-of-technical-staff-workforce-security-at-black-forest-labs-374bc5

Source: https://jobsbylevel.com/jobs/member-of-technical-staff-workforce-security-at-black-forest-labs-374bc5

## Cite this page

Level. https://jobsbylevel.com/jobs/member-of-technical-staff-workforce-security-at-black-forest-labs-374bc5.

Get job alerts: https://jobsbylevel.com/newsletter