Staff Engineer - Security

Overview

Staff Engineer (Security) to secure an AI-driven, multi-tenant execution environment where code is generated and executed continuously.

What you'll do

• Own security across AI-generated applications, agent pipelines, and cloud/runtime environments.
• Define security patterns and guardrails for AI-generated apps, including validation layers.
• Secure multi-tenant cloud and runtime infrastructure executing untrusted AI-generated code.
• Perform end-to-end threat modeling across AI agents, APIs, cloud infrastructure, and runtime.
• Build security detection and defense for abnormal execution and data-exfiltration attempts.
• Secure CI/CD and agent pipelines against supply-chain attacks and insecure code propagation.
• Build reusable security primitives (authn/authz, SDKs, APIs, validation, and rate limiting).

What you'll need

• 8–15+ years of security engineering experience.
• Hands-on experience across application/product security and cloud/infrastructure security.
• Strong coding and automation skills in Python, JavaScript/TypeScript, or backend systems.
• Deep application security fundamentals, including OWASP Top 10, authentication/authorization, API security, injection vulnerabilities, and threat modeling.
• Cloud and infrastructure security experience across AWS/GCP, Kubernetes/containers, IAM/secrets, network security, container security, runtime protection, and multi-tenant environments.
• Experience securing systems that execute untrusted or user-generated code.
• Ability to work across application, infrastructure, and platform layers.

Nice to have

• Experience securing AI/LLM or agentic systems.
• Experience with prompt injection, output validation, and AI-specific threat models.
• Experience with sandboxed or ephemeral execution environments.
• Experience building security systems rather than only identifying vulnerabilities.

Details

• Location: Bangalore.