Staff Security Engineer

Role overview Own and improve security across software, cloud infrastructure, and delivery systems for products that use AI agents to handle untrusted content, run code, and access credentials. The work combines hands-on application security with infrastructure hardening, automated controls, detection, and incident response, with an emphasis on protecting agent workflows without unnecessarily slowing engineering teams.

Responsibilities - Set security priorities and carry fixes through implementation and verification. - Find vulnerabilities through code review, penetration testing, and red-team exercises focused on agent behavior. - Partner with infrastructure, platform, and product engineers to harden cloud systems and embed security controls into development pipelines. - Build detection for user and agent activity and lead incident response. - Create tooling, automation, and test harnesses to check whether safeguards work in practice. - Assess risks such as prompt injection, data leakage, cross-session access, and unsafe agent-generated code.

Requirements - Strong application security skills, including identifying exploitable flaws and explaining practical fixes. - Hands-on offensive security and penetration testing across web applications, APIs, and cloud environments. - Solid knowledge of cloud and infrastructure security, including identity and access management, network boundaries, containers, secrets, and logging. - Experience building detections and handling incidents. - Working knowledge of AI coding agents and language-model systems, including common failure and manipulation patterns. - Software engineering ability to build security automation, plus sound judgment when balancing risk and release needs.

Nice to have Experience securing sandboxed or multi-tenant code execution, a record in red teaming, bug bounties, or CTFs, and familiarity with security frameworks such as ISO 27001 or SOC 2 in a small organization.

Benefits and work setup Remote-first, with global hiring and an optional Barcelona coworking hub. The listing also mentions equity, autonomy, and close collaboration in a small team.