Staff AI Application Security Engineer

About the role

Our engineering team works at the frontier of AI‑native software development, building a platform of autonomous agents that plan, decide and act for enterprise customers. As a Staff Application Security Engineer you will own the security of the product, its APIs and the production environment, tackling novel challenges such as prompt‑injection and safe agent execution.

Key responsibilities

• Migrate access‑control to the new model and close any gaps.
• Secure the product surface, including authentication, authorization, API security, input/output handling and supply‑chain risk.
• Build guardrails that let agents act safely: permissions, attribution, sandboxing, tool‑use limits and prompt‑injection defence.
• Establish least‑privilege access across production and make the secure path the fast path.

Required profile

• A clear view on agentic security and how security changes when agents perform work.
• Deep AppSec experience on production platforms (authn/authz, API security, secure design, supply‑chain risk).
• Hands‑on ownership mindset – you prefer to fix issues yourself.
• Systems thinking to design end‑to‑end autonomous systems.
• Comfort building with agents and a willingness to learn AI‑engineering fundamentals.

Required skills

• TypeScript
• AWS
• React
• Vue.js
• Node.js
• Express.js
• Python
• PostgreSQL
• MongoDB
• Vercel
• Terraform
• Kubernetes
• MCP

What we offer

• Competitive salary, equity and ESOP.
• AI Productivity Benefit up to $1200 USD per year for AI tools.
• 12 weeks paid parental leave (additional 6 weeks for birthing parent).
• Catered lunches, snacks, drinks and occasional Uber Eats dinners.
• Quarterly team events, social clubs and milestone swag.
• 24/7 mental‑health support through Sonder EAP.