---
title: 'Backend Engineer (Security) at Trigger.dev'
canonical: 'https://feeny.ai/job/backend-engineer-security-trigger-dev-or-dnyywsymm6mm'
type: 'job'
last_seen: '2026-10-17'
---

# Backend Engineer (Security) at Trigger.dev

- **Company:** Trigger.dev
- **Location:** OR, United Kingdom
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-23
- **Last confirmed live:** 2026-10-17
- **Apply:** https://jobs.ashbyhq.com/triggerdev/cf7e7521-b323-41b8-917b-2972685c7791

## Job description

## About us

[Trigger.dev](http://Trigger.dev) is the platform for running reliable AI agents and workflows. Developers use it to build, deploy, and scale production systems with built-in tools for orchestration, scheduling, monitoring, and debugging. Our Cloud product is a managed service where we deploy our users' code and auto-scale from zero to millions of executions. Today, we serve thousands of teams building AI apps and agents, handling hundreds of millions of executions per month.

## About the position

We're looking for a backend product engineer who loves security - not a security box-ticker. You'll build and own the systems that let Trigger safely run massive volumes of untrusted user code inside our infrastructure, at scale. Some of our customers let their own users run untrusted code on top of Trigger - think coding agents executing arbitrary instructions. We have to guarantee that code can never break Trigger's systems, or our customers' systems. That makes this partly a product engineering role: building secure sandbox runtimes is a feature we ship, not something bolted on after the fact. The ideal person here is a backend engineer with genuine offensive-security instincts - someone who naturally gravitates toward hacking, pen testing, and breaking things, and brings that curiosity into how they build. You'll pair strong backend/product instincts with a hacker's mindset.

## What you'll be doing

You'll do a variety of things including: Sandbox and runtime security. Designing and maintaining the secure execution environments that isolate untrusted user code - the core, product-shaped problem at the heart of this role. Threat detection and incident response. Building monitoring and alerting for suspicious activity, and leading the response when something needs investigating. Vulnerability management, end to end. Regular scanning and triage, plus AI-assisted security scans run on a quarterly cadence, and triaging incoming disclosures. Offensive security. Running internal, AI-assisted pen testing, and potentially bringing in external firms for deeper engagements. PR security review. Adding a security-specific review layer on top of our normal PR process. SOC 2 and compliance. Mostly done already - this is about ongoing maintenance, not standing it up from scratch. Vulnerability disclosure process. Owning our vulnerability disclosure program end to end. Security culture. Helping the wider engineering team build secure habits - reviews, documentation, and pragmatic guardrails rather than heavy process. Working at a Commercial Open Source Software company is more than just security work:

- We have an active community on Discord and GitHub. Everyone on the team helps customers, reviews PRs, and creates issues.
- Having great documentation is essential. Everyone writes docs.
- We're a product-led growth company, so everyone is expected to get involved in creating content like code examples, blog articles, videos, and tweets.

## Requirements

Real backend engineering experience. You can design and ship production backend systems, not just audit someone else's. Genuine offensive-security curiosity. Pen testing, CTFs, bug bounty hunting, or hacking as a hobby or discipline - this isn't a checklist role. Comfort owning ambiguous, product-shaped security problems. Sandboxing and runtime isolation are engineering problems as much as they are security ones. A proactive mindset. This role should take work off the team's plate, not create a queue for others - we're not looking for a security box-ticker. Comfortable being on call. Reliability and security response are shared responsibilities across the team. Open to in-person events throughout the year. If you're remote, we'll arrange these so the team gets real time together. You'll be an amazing fit if you have:

- Experience building or hardening sandboxed/isolated execution environments (containers, microVMs, gVisor, Firecracker, WASM sandboxes, or similar).
- A track record in pen testing, bug bounty programs, or CTFs.
- Experience using AI-assisted tooling for security scanning or workflows.
- A proven track record of contributing to open source projects.
- Worked at a developer tools, infrastructure, or open source company.
- Experience with Node.js and TypeScript, enough to read and review application code.

## Benefits

Generous, transparent compensation and equity - we hire the best talent and pay to reflect that. We also offer equity so everyone is invested in the company's success. Async working - need a heads-down day or meeting-free days to stay productive? No problem! Home office - we help provide equipment for a comfortable setup so you're as productive at home as you are in the office. Generous vacation - 25 days vacation excluding national holidays, plus sick leave and generous parental leave. Training budget - an annual budget to contribute towards learning, such as books, an Audible subscription, or online courses. Pension contributions - enroll in our company pension scheme, or we'll contribute directly to your private pension.

## Our values

We are proud to be open source - we believe in the open source community and building a great free-to-use product. We ship uncomfortably fast - as a startup, moving fast is key. We are pragmatic about what we build, when we build it. Working autonomously - we don't tell you what to do. We decide as a team what will have the biggest impact for our customers and prioritise from that.

## About Trigger.dev

## Company Overview
- **One-liner**: Trigger.dev provides an open-source platform for building and deploying fully-managed AI agents and workflows in TypeScript, with long-running tasks, retries, queues, observability, and elastic scaling.
- **Entity Type**: Private (Series A)
- **Headquarters**: Altrincham, England, United Kingdom
- **Founded**: 2022
- **Founders**: Eric Allam and Matt Aitken

## Core Business
- Primary industry/industries: AI workflow automation, developer tools, cloud infrastructure
- Target customers: B2B, developers and engineering teams building AI-powered applications, startups, and enterprises
- Mission or purpose statement: To build the world’s best open-source AI agent and workflow platform, enabling developers to create invincible AI apps with minimal infrastructure overhead.

## Products & Services
- **[Trigger.dev Platform](https://trigger.dev)**: A fully-managed, open-source (Apache 2.0) platform for building and deploying durable AI agents and workflows in TypeScript. Key features include automatic retries, task queues, real-time streaming, human-in-the-loop, versioning, elastic scaling, and full observability. Supports custom build extensions, Puppeteer, FFmpeg, Python scripts, and self-hosting.

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total funding of $16.5M (Series A, raised ~6 months ago as of mid-2026) [cbinsights.com](https://www.cbinsights.com/company/triggerdev)
- **Notable Investors/Partners**: Includes Y Combinator, Liquid 2 Ventures, Pioneer Fund, Michael Grinich, Rebel Fund, and 10+ other investors [cbinsights.com](https://www.cbinsights.com/company/triggerdev)
- **Growth Signals**: 15.5k+ GitHub stars on the open-source repository; founders previously built JSON Hero (35k+ monthly developers); active hiring for senior engineering roles; strong community adoption.

## Competitive Advantages
- **Open Source & Self-Hostable**: Apache 2.0 license allows full code access, self-hosting, and community contributions, lowering lock-in risk.
- **TypeScript-First**: Native TypeScript support with no restricted runtimes; developers can use their existing stack and tools.
- **Durable Execution**: Tasks survive refreshes, redeploys, and crashes; no timeouts; automatic retries with fine-grained control.
- **Built-in Observability & Streaming**: Real-time logs, tracing, alerts, and the ability to stream LLM responses directly to frontends.
- **Elastic Scaling**: Pay only for actual execution time; infrastructure scales automatically without managing servers.

## Strategic Focus
- Continue building the leading open-source AI agent and workflow platform, emphasizing reliability, developer experience, and community growth.
- Expand integrations with popular AI providers and developer tools.
- Scale the cloud offering while maintaining strong self-hosted support.

## Why Work Here
- **Culture**: Proudly open source, ship fast, no ego, autonomy, customer obsessed, and ambitious [trigger.dev/careers](https://trigger.dev/careers).
- **Work Model**: Remote or hybrid in the UK/Europe; flexible and async-friendly.
- **Team**: Small, high-impact startup with experienced founders (ex-Code School CTO, Apple App of the Year creator).
- **Perks**: Work on a widely-used open-source project, influence product direction, and solve challenging infrastructure and AI problems.

## Sources
1. [trigger.dev](https://trigger.dev)
2. [trigger.dev/careers](https://trigger.dev/careers)
3. [cbinsights.com](https://www.cbinsights.com/company/triggerdev)
4. [ycombinator.com](https://www.ycombinator.com/companies/trigger-dev)
5. [linkedin.com](https://uk.linkedin.com/company/triggerdotdev)

## Other roles at Trigger.dev

- [Technical Recruiter (3 month FTC, Temp to Perm)](https://feeny.ai/job/technical-recruiter-3-month-ftc-temp-to-perm-trigger-dev-london-g1s3mmwts36j) — London, United Kingdom
- [Senior Backend Engineer (Europe)](https://feeny.ai/job/senior-backend-engineer-europe-trigger-dev-or-276vbzhwq6n9) — OR, United Kingdom
- [Design Engineer](https://feeny.ai/job/design-engineer-trigger-dev-or-cpmt91w7vex5) — OR, United Kingdom
- [Marketing Lead](https://feeny.ai/job/marketing-lead-trigger-dev-or-sd7n2jharx05) — OR, United Kingdom
- [DevRel (SF Events)](https://feeny.ai/job/devrel-sf-events-trigger-dev-san-francisco-t50892yc3ebf) — San Francisco, CA