Security Engineer

Role overview A six-month contract focused on turning a new hosted service’s security plans into controls that can be tested and supported by evidence. You’ll secure a developer-facing agent that runs shell commands on a user’s machine, combining threat modeling, implementation work, penetration testing, and disclosure handling.

Responsibilities - Write and publish a threat model for the command-running agent, including the risks created by language-model-directed actions. - Design enterprise security controls such as single sign-on, user provisioning, audit exports, and allow-lists, then verify that they work as intended. - Arrange and lead the service’s first independent penetration test. - Own remediation of findings from the penetration test. - Establish a responsible-disclosure process and handle incoming security reports. - Document findings clearly for both engineers implementing fixes and auditors reviewing evidence.

Requirements - Experience securing a product that has been reviewed by other organizations’ security teams. - Ability to read and modify TypeScript code in the product runtime. - Strong written communication for both technical implementation and audit contexts. - Practical judgment to turn security policies and plans into working, verifiable controls.

Benefits and work setup - Remote contract role based in Europe for six months. - The selection process includes a short application note and work links, conversations with the runtime lead and team, and a paid threat-model review exercise.