Founding Security Engineer (Application & Infrastructure)

Role overview Own security across an AI platform that uses autonomous agents to work with enterprise systems and data. This founding role spans application, AI, cloud, and infrastructure security, with an emphasis on building practical protections into the product and engineering workflow.

Responsibilities - Defend against web vulnerabilities and AI-specific threats such as prompt injection and unsafe output handling; build safeguards for agent inputs and outputs. - Red-team agent behavior and investigate weaknesses in business logic and agent reasoning. - Integrate security checks into CI/CD, including code and dynamic analysis, dependency review, and secret detection. - Harden cloud environments, Kubernetes clusters, container configurations, IAM policies, and network boundaries. - Lead vulnerability detection and remediation, including bug bounty programs, external penetration tests, and dependency security. - Help deliver customer-facing security capabilities such as audit logs, data residency controls, and access governance.

Requirements - At least five years in security engineering, focused on application and cloud security. - Strong knowledge of web risks such as CSRF, SSRF, and XSS, with experience using tools such as Burp Suite, Semgrep, or CodeQL. - Ability to review Python or Go code and identify flaws that automated scanners may miss. - Hands-on experience securing AWS or GCP environments and Kubernetes workloads. - Understanding of container security controls, including capabilities, seccomp, and namespaces. - Red-team or CTF experience, plus familiarity with prompt injection and data-exfiltration risks in agent systems.

Nice to have - Experience securing execution sandboxes such as gVisor or Firecracker, or working in a purple team. - Open-source security contributions, AI safety research, or familiarity with SOC 2 and ISO 27001.

Benefits and work setup - Full-time, London-based or remote role with founding equity. - Opportunity to define security practices for autonomous enterprise agents and work with an experienced technical team.