Security Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take charge of the security for EULER's applications.

• Conduct a comprehensive review of the platform, encompassing data access, backend services, APIs, integrations, and the AI layer.

• Perform security assessments, including code reviews, configuration audits, and penetration testing across applications, APIs, and integrations.

• Evaluate AI agents and integrations for potential issues such as prompt injection, excessive permissions, and unauthorized access to data.

• Transform security findings into clear, prioritized recommendations for the engineering team.

• Implement security fixes when deemed necessary.

• Define and update secure development practices in response to evolving threats and standards.

• Utilize open-source, agent-based security tools for ongoing testing and validate their results.

• Participate in customer calls alongside security teams and address technical security inquiries.

• Mentor the engineering team in executing security enhancements.

⛳️ Requirements

• A minimum of 4 years in application security, product security, or security-oriented software engineering.

• Practical experience in identifying vulnerabilities in web applications and APIs.

• Familiarity with OWASP Top 10, access control, authentication, and OAuth.

• In-depth knowledge of AI and LLM security, including prompt injection and agent permission design.

• Experience with AI-agent-based security tools.

• Proficient in reading and writing JavaScript/TypeScript and Python code, with the ability to implement fixes when necessary.

• Strong proficiency in written and spoken English.

• Comfortable presenting during customer calls.

• Experience with Bubble.io or similar low-code platforms is a plus.

• Knowledge of securing MCP servers or other agent-to-tool integrations is advantageous.

• Familiarity with Cloudflare and AWS is desirable.

• Security certifications such as OSCP, OSWE, BSCP, or equivalent; a record in bug bounty programs or CVEs is a plus.

• Must be available to work during US East Coast hours.

🏝️ Benefits

• Competitive salary.

• Full ownership of your work.

• Contribute to AI security in a product where agents function on behalf of users daily.

• Engage with a B2B platform centered around AI agents.

• Work at a profitable, rapidly growing SaaS company with enterprise clients.