Application Security Engineer – Agents Platform

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Develop security primitives that are straightforward for engineers to implement, beginning with audits of the Agents codebase.

• Examine new product initiatives for security and integrate findings into shared tools.

• Spearhead significant security enhancements to the Agents platform in partnership with Core Security.

• Guarantee proper utilization of authentication and authorization controls.

• Create guardrails that uphold security best practices.

• Establish the security standards for the Agents platform, ensuring that secure development is the preferred approach.

• Collaborate daily with engineers to facilitate swift and secure shipping of products.

• Allocate around 70% of your time to developing tools and internal systems, with the remaining time dedicated to collaboration, security research, and coordination with Core Security.

• Take ownership of solutions from conception through to production.

⛳️ Requirements

• Over 5 years of experience in application security engineering at scale, encompassing secure design, vulnerability management, and security tools.

• Strong software engineering capabilities with a proven track record of building and deploying products with production-quality code.

• Proficient in Python; ability to rapidly learn Python if primarily experienced with Golang or another programming language.

• Practical experience with authentication and authorization mechanisms.

• Background in large-scale, customer-facing backend systems with enterprise-level security.

• Excellent communication skills and a passion for collaborating with developers.

• Proven history of managing delivery from start to finish.

• Experience in security for AI and LLM applications is a plus.

• Cloud-native expertise with AWS or GCP, Kubernetes, Terraform, IAM, networking, and Linux internals is an advantage.

• Familiarity with regulated environments such as SOC 2, ISO 27001, PCI, or HIPAA is beneficial.

• Compliance certifications, incident response experience, traditional security background, and prior domain knowledge are not mandatory.

🏝️ Benefits

• Annual discretionary stipend for professional development.

• Annual discretionary stipend for social travel to connect with colleagues.

• Annual team offsite event.

• Monthly co-working stipend for employees located away from a main hub.

• Flexibility to work from offices in Dublin, London, or Warsaw.

• A global team with a flexible location culture.