Application Security Engineer - Agents platform

About the role

ElevenAgents is our platform for building and running conversational AI agents at scale. As our first Application Security Engineer embedded in the Agents team, you’ll make the secure way the easy way. You’ll build the security tooling and reusable primitives that let engineers ship securely by default.

This is a builder role. Expect to spend about 70% of your time building tools and internal systems, and the rest working with engineers, staying in sync with Core Security, and doing security research. More than half of the work is greenfield and most of it starts with you, you’ll spot the problems worth solving and own each solution from idea to production.

You will

• Build security primitives that are easy for engineers to adopt, starting from what you find when you audit the Agents codebase
• Review new product work for security and feed what you learn back into shared tooling
• Lead the major security improvements to the Agents platform, working closely with Core Security
• Make sure Agents platform uses authn and authz controls correctly and building the guardrails that keep the platform from compromising on security best practices
• Set the security bar for the Agents platform and make meeting it the easy path for product engineers
• Work with engineers daily to help them ship fast and safely

Requirements

• 5+ years in application security engineering at scale, covering secure design, vulnerability management and security tooling
• Strong software engineering skills: you have built and shipped products end to end, in production-quality code
• Fluency in Python, our main language. Golang or another language is fine if you can pick up Python quickly
• Hands-on experience with authentication and authorization. Experience securing cross-service communication is a bonus
• Experience with large-scale, customer-facing backend systems and enterprise-grade security
• Clear communication and a real enjoyment of working with developers
• A track record of owning delivery end to end

Bonus

• Security for AI and LLM applications
• Cloud-native experience (AWS or GCP, Kubernetes, Terraform, IAM, networking, Linux internals)
• Experience in regulated environments (SOC 2, ISO 27001, PCI, HIPAA)
• Not required: Compliance certifications, incident response experience, a traditional security background, or prior domain knowledge. We care about what you have built and shipped, and open source work or conference talks are welcome evidence of that.

Location

This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in Dublin, London or Warsaw