AI Agent Security Architect

The role

You will serve as the primary technical authority for Replit's autonomous and AI agent security blueprint. You will design and maintain runtime defense systems, guardrail frameworks, and sandboxing architectures for AI agents.

What you will do

• Define the long-term vision and architectural patterns for securing autonomous agent workflows.
• Architect and deploy dynamic input/output guardrail systems and semantic firewalls.
• Design secure, short-lived, micro-isolated environments for agent code execution.
• Conduct specialized threat modeling and lead AI red-teaming initiatives.
• Architect fine-grained permission models and Human-in-the-Loop authorization patterns.
• Design data isolation and poisoning prevention controls for vector databases and RAG pipelines.
• Maintain authoritative secure design patterns and SDKs for engineering teams.
• Identify and document non-deterministic and agentic security risks in the Cybersecurity Risk Register.
• Design tamper-evident logging and telemetry standards for agent reasoning and tool execution.
• Partner with GRC to translate security controls into audit documentation and support Sales inquiries.

Required qualifications

• 6+ years of experience in security engineering or security architecture.
• At least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks.
• Deep understanding of agentic architectures and protocols (e.g., Model Context Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies).
• Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination.
• Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS.
• Proficiency in Python, Go, or TypeScript/JavaScript.
• Proven track record of reviewing code and building functional security tooling or guardrails.
• Experience authoring, maintaining, and evangelizing technical security architecture documentation.
• Exceptional ability to communicate complex non-deterministic AI risks to technical engineers and executive stakeholders.
• Proven track record of contributing to an enterprise Cybersecurity Risk Register.

Nice to have

• Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments.

Benefits

• Competitive Salary & Equity
• 401(k) Program with a 4% match (US Only)
• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays
• Commuter Benefits (In-Office & US Only)
• Monthly Wellness Stipend
• Autonomous Work Environment
• In Office Set-Up Reimbursement (In-Office Only)
• Quarterly Team Gatherings
• In Office Amenities (In-Office Only)

About the company

Replit is the agentic software creation platform that enables anyone to build applications using natural language. It is democratizing software development by removing traditional barriers to application creation.