Staff Security Engineer - AI/Agent security

Job Description

Staff Security Engineer – AI / Agent Security

\n

Remote (US) | Mid-$200Ks + Early-Stage Equity

\n

\n

We’re partnering with a fast-growing, early-stage cybersecurity company building the security layer for enterprise AI agents, MCP servers, skills, and plugins.

\n

\n

We’re looking for a senior security engineer who has lived on both sides of the problem: someone who started as a strong software engineer, became a hands-on security practitioner, and has gone on to build security products, platforms, or tooling.

\n

\n

This is not a traditional AppSec or security operations position. We’re looking for a builder who understands vulnerabilities and attacks firsthand and can turn that knowledge into production security capabilities.

\n

\n

What you’ll work on:

\n

\n
• Build security products for AI agents, MCP servers, skills, and emerging agentic infrastructure
\n
• Develop scanning and detection capabilities, including parsers, rule engines, analysis pipelines, and automated security checks
\n
• Identify and detect risky or unauthorized AI/agent activity across enterprise environments
\n
• Work across application security, endpoint detection, API security, software supply chain, and AI/LLM threats
\n
• Design security capabilities from initial threat research through production implementation
\n
• Help define how enterprises secure a rapidly evolving AI attack surface
\n

\n

\n

What we’re looking for:

\n

\n
• 8+ years of software/security engineering experience
\n
• Strong software engineering background with hands-on Python
\n
• Experience as a security practitioner in areas such as Product Security, Application Security, offensive security, detection engineering, or security research
\n
• Demonstrated experience building security tooling or products—not simply implementing or operating third-party tools
\n
• Experience building scanners, detection systems, parsers, rule engines, security automation, or analysis pipelines
\n
• Strong understanding of modern application and API security
\n
• Ability to independently take ambiguous security problems from research through production
\n

\n

\n

Especially interesting:

\n

\n
• AI/LLM security
\n
• Agentic systems or agent orchestration
\n
• MCP security
\n
• Prompt injection and AI red teaming
\n
• Endpoint/asset discovery
\n
• SAST/DAST/SCA
\n
• Software supply-chain security
\n
• EDR/XDR or detection engineering
\n
• Previous experience building commercial security products
\n

\n

\n

Why this opportunity:

\n

You’ll be joining at an early stage with significant technical ownership and the opportunity to help define an entirely new category of enterprise security. This is an opportunity to go from securing individual applications and systems to building the products that secure the next generation of AI infrastructure.

\n

\n

Compensation: Target cash compensation in the mid-$200Ks, plus meaningful early-stage equity.

\n

Location: Remote within US time zones.