Senior Security Engineer - Cloud & AI Platform

The role

You will build security controls for autonomous agents and the platform they run on. This includes threat modeling AI features, designing guardrails for agentic workflows, and enforcing tenant and data isolation. You will also establish security baselines for Kubernetes and cloud infrastructure.

What you will do

• Threat model new AI agent features including prompt injection, jailbreaks, and data exfiltration
• Design guardrails for agentic workflows such as least-privilege tool scopes and human-in-the-loop approvals
• Enforce tenant and data isolation across retrieval, context stores, and model calls
• Secure the AI supply chain including model vetting and third-party MCP servers
• Run AI red-team exercises and build automated adversarial tests into CI
• Establish security baselines for Kubernetes and cloud infrastructure
• Implement security in CI/CD through IaC scanning, SAST and dependency scanning
• Develop AI-aware detection for logging prompts, tool calls and agent actions
• Partner with the Security & Compliance Lead on technical controls for SOC 2 Type II, ISO 27001, HIPAA and ISO 42001

Required qualifications

• 5+ years in cloud security, application security, or DevSecOps
• Deep hands-on Kubernetes and cloud security experience
• Security automation with IaC (Terraform/Helm) and Python or Bash
• A working understanding of LLM application risks (OWASP Top 10 for LLM Applications) and how agentic systems fail
• Comfortable influencing engineers without formal authority

Nice to have

• GCP/Azure Preferred
• Hands-on experience securing LLM, RAG, or agentic systems in production
• AI red teaming, or familiarity with MITRE ATLAS
• CNAPP/CSPM tooling, SIEM/detection engineering
• Contributions to AI security research, open-source tools, or CTFs

Benefits

• Certain roles may be eligible for variable compensation, equity, and benefits

About the company

Ema builds AI Employees for HR, IT and Finance. The company is headquartered in Silicon Valley with offices in London, Bangalore and Vancouver.