Security Engineer – Agentic AI
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Responsibilities:
- Threat model agents, tools, MCP servers, and multi-agent workflows using OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and MITRE ATLAS
- Run a lightweight pre-launch security review gate
- Review agentic code and designs, publish secure defaults, and make risk trade-offs explicit and owned
- Teach secure agent practices through guides, threat-model walkthroughs, demos, and office hours
- Design authentication and authorization for agents and tools using OAuth 2.0/OIDC, token exchange, scoped short-lived credentials, per-tool least privilege, and fail-closed MCP authorization
- Harden containers and sandboxes with filesystem isolation, egress control, and human approval for irreversible actions
- Build gateway defenses against prompt injection, tool abuse, excessive agency, and data exfiltration using input/output filtering, PII/DLP, and policy-as-code
- Build automated adversarial tests for injection, tool misuse, exfiltration, and goal drift in CI and on a schedule
- Govern MCP servers, skills, plugins, models, and dependencies through review, allow-listing, signing, SBOMs, and scanning
- Make model, tool, and agent calls traceable and feed guardrail events and anomalies into monitoring and alerting
- Monitor controls, tune guardrails, and keep them patched and current in production
- Own agent-related incident response and lead technical response
- Map controls to ISO 27001, ISO/IEC 42001, SOC 2, GDPR, and TPN and keep evidence audit-ready
- Build controls, tooling, and tests; review code and designs; share security knowledge across Brahma teams
- Follow emerging agent and AI threats, test new attack classes in bounded experiments, and bring proven defenses into production
Requirements:
- 5+ years in security engineering with a strong application or product security component
- Fluent Python
- Track record of shipping security tooling, controls, and automated tests as production code
- Hands-on experience securing LLM applications or agents against prompt injection and unsafe tool use
- Deep knowledge of OAuth 2.0, OIDC, token exchange, workload identity, and least-privilege design
- Experience leading structured threat modelling and turning findings into prioritised engineering work
- Experience embedding security scanning and checks into CI/CD
- Experience securing containerised workloads
- Ability to explain risk and trade-offs clearly to engineers and leadership, and to document decisions
- Track record of teaching and documenting security practices for colleagues and other teams
- Nice to have: experience with garak, PyRIT, promptfoo, or similar
- Nice to have: practical use of OPA/Rego, Cedar, or similar
- Nice to have: familiarity with gVisor, Firecracker, seccomp, or Landlock
- Nice to have: experience building or securing MCP servers, LLM gateways, or guardrail services
- Nice to have: working knowledge of GCP IAM, Workload Identity, Secret Manager, and Cloud Logging
- Nice to have: exposure to ISO/IEC 42001, NIST AI RMF, or MPA/TPN content security
- Nice to have: OSCP, GIAC, CSSLP, or equivalent certification
Benefits:
- No formal on-call rotation yet, though one may be introduced
Similar Jobs
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Senior Strategic Security Advisor
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.
Senior Security Architect
Senior Security Architect advancing First Hawaiian Bank’s enterprise security architecture. Securing hybrid cloud, on-premises, and AI/ML technologies while supporting regulatory compliance.
Staff Security Engineer – Enterprise Security
Staff Security Engineer securing ServiceNow’s AI-powered enterprise SaaS platform across cloud, on-premises, and isolated infrastructure. Supporting Protected B workloads and Canadian government compliance.
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.