Ai Agent Security

Ai Agent Security Cybersecurity Jobs

4 jobs found

Today

Staff Application Security Engineer

BambooHR Draper, UT 🇺🇸 Remote

Draper, UT

Today

Full time Agentic Ai Security Agentic Integrations Ai Agent Security

Apply Now

Job Description

BambooHR is hiring a Staff Application Security Engineer to lead application security for AI features and agentic systems, with a focus on standards, reviews, and SDLC integration.

Responsibilities

Lead security reviews and threat models for AI features and agentic systems, including autonomous agents, MCP servers, and third-party integrations
Maintain and update review playbooks and quality criteria as threat landscapes evolve
Set BambooHR security standards for AI agents covering:
- Identity and delegated authorization
- Tenant- and user-scoped data access
- Safe handling of tool output
- Tool supply chain risk
- Human-approval requirements
Own agent designs used by the security team for validation, triage, review assistance, and remediation
Build and ship agent-assisted capabilities with clear evaluation criteria, bounded permissions, and human approval gates for high-impact actions
Support developers and security champions with self-serve guidance and tooling, and advocate for engineering investment needed to operationalize work
Embed AppSec requirements into the SDLC with design-time and release-time gates for AI features
Make agent-assisted code review, finding validation, and fix suggestions a default part of CI/CD pipelines with blocking criteria and a fast exception path
Run AppSec programs across teams and quarters by setting goals, milestones, and success metrics; managing a lightweight intake and prioritization cadence; coordinating dependencies across engineering, product, and operations; and reporting progress, risks, and tradeoffs to leadership
Represent AppSec in architecture forums, harmonize security requirements to reduce duplicated effort, serve as an escalation point, and coach leaders on security tradeoffs
Partner with Legal, Privacy, and GRC to apply AI governance through guardrails and automation, including for emerging AI regulations
Train and coach software engineers and engineering teams on secure design and threat modeling, with emphasis on authentication, authorization, multi-tenancy, and AI features
Mentor security engineers on technical direction and career growth; close skill gaps through onboarding, training, and mentorship
Participate in an on-call rotation as needed to support incident response and resolve escalated security issues

Requirements

Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent practical experience
8+ years of experience in security, including 5+ years hands-on application security experience
Experience securing multi-tenant SaaS platforms, including tenant isolation
Cloud and infrastructure security experience (e.g., AWS, Azure, GCP)
Hands-on experience building AI agents or agentic workflows, including concrete examples of permissions, failures, and validation (production systems, internal tools, personal or open-source projects, and substantial prototypes all count)
Demonstrated ability to evaluate security of AI and agentic systems, including:
- Prompt injection
- Tool and context poisoning
- Excessive agency
- Delegated authorization
- Data leakage
- Supply-chain risk in models and tools
Familiarity with OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, or comparable frameworks
Ability to design evaluations for agentic workflows covering task success, false positives and negatives, adversarial cases, and regression checks
Proven experience leading threat modeling (e.g., STRIDE, attack trees) and design reviews for complex applications and APIs
Deep understanding of web application and API security, including authentication and authorization (OAuth 2.0 scopes and delegation, OpenID Connect, token audience and validation), session management, and access control models
Strong software engineering skills in at least one language (e.g., Python, TypeScript, PHP), including testing and maintaining tools others depend on
Track record of influencing without authority through cross-team initiatives, business cases, and clear communication of technical risk to engineering, product, legal, and leadership audiences
Experience mentoring engineers, formally or informally
Sound judgment in ambiguous situations, including the ability to explain tradeoffs, recommend mitigations, and bring risk-acceptance decisions to the right owner

Technologies

AWS
Azure
GCP
Python
TypeScript
PHP
OAuth 2.0
OpenID Connect
OWASP Top 10 for LLM Applications
OWASP Top 10 for Agentic Applications
STRIDE
MCP servers

Benefits

Comprehensive health, life, and disability insurance
Generous leave policies including 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off
401k plans with up to 6% company match
$2000 Paid-Paid Vacation bonus
EAP through Headspace

What Would Make You Stand Out

Experience securing MCP servers and gateways
Experience securing AI coding assistants or developer agent tooling at organizational scale, or integrating AI-driven security checks into CI/CD pipelines
Familiarity with AI governance and SaaS compliance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001)
Relevant security certifications (e.g., CSSLP, OSWE, GWAPT)
Experience building or running security champions programs, such as recruiting and training champions or embedding security advocates in engineering teams

Location and Employment Notes

Location: Draper, UT (remote)
This is a remote position available in the state listed on the job
Employment with BambooHR is contingent on passing both a background and credit check

View full job page →

Today

Associate Director - Application Security

S&P Global New York, NY

New York, NY

Today

$0k+/yr Full time Ai Agent Security Ai Application Security Ai Security

Apply Now

Job Description

Lead enterprise application security programs that span secure SDLC controls, security design reviews, and AI-enabled testing.

Responsibilities

Lead complex application security assessments across multiple methodologies, including SAST, SCA, DAST, API security, secrets detection, and threat modeling to identify and mitigate vulnerabilities.
Drive integration of security controls into developer workflows across GitHub, Azure DevOps, Jenkins, and cloud-native platforms using risk-based quality gates to reinforce secure coding practices.
Conduct threat modeling and perform security design reviews for new applications, APIs, and cloud services; provide guidance on secure architecture decisions.
Design and implement AI-enabled Application Security capabilities, including custom tools, agents, and automations to improve security testing, triage, and remediation while meeting enterprise governance standards.
Collaborate with engineering, product, cloud, and risk stakeholders to address systemic application risks and establish scalable security controls across the SDLC.
Provide technical leadership and mentorship to security analysts and engineering partners; contribute to enterprise standards, procedures, and audit-ready documentation.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, or Engineering.
6+ years of experience in Application Security, DevSecOps, or secure software.
Proficiency with application security testing and design practices, including SAST, SCA, DAST, threat modeling, and CI/CD security integration.
Experience integrating security controls into GitHub, Azure DevOps, Jenkins, or cloud-native delivery environments.
Experience using generative AI and AI-assisted development tools to build custom security tooling, scripts, integrations, or automations.

Additional Preferred Qualifications

Experience with Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, and retrieval-augmented generation for secure enterprise AI integration.
Experience with cloud application security across AWS, Azure, and GCP, including understanding of multi-cloud security controls.
Proficiency in Python, PowerShell, or equivalent scripting languages to automate and improve security operations at enterprise scale.
Experience with software supply chain security initiatives, including dependency governance, artifact management, provenance validation, and trusted package consumption.
Ability to communicate complex security risk to senior stakeholders and drive remediation across distributed engineering teams.
Experience providing technical mentorship within security or engineering teams.

Technologies

SAST, SCA, DAST, API security, secrets detection, threat modeling
GitHub, Azure DevOps, Jenkins, CI/CD, SDLC
Python, PowerShell
AWS, Azure, GCP
Model Context Protocol (MCP), AI agents, agentic architectures, tool calling, retrieval-augmented generation, generative AI

Benefits

Annual incentive plan
Health care coverage designed for the mind and body
Generous time off
Access a wealth of resources to grow your career and learn valuable new skills
Competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs
Family friendly perks for partners and little ones
Retail discounts
Referral incentive awards

Compensation

Anticipated base salary range: $130,000 to $190,000
Final base salary based on geographic location, experience level, skill set, training, and licenses and certifications

Mission and Values

Mission: Advancing Essential Intelligence.

Values: Integrity
Values: Discovery
Values: Partnership

Location: New York, NY (onsite)

View full job page →

6d ago

Cyber Security Engineer

Robotics Technologies Dallas, TX

Dallas, TX

6d ago

$73 - $73/hr Full time Ai Agent Security Ai Security Cloud Platforms

Apply Now

Job Description

This contract role in Dallas, TX is for a Cyber Security Engineer focused on securing enterprise cloud environments. The assignment runs for 8 months with an extension option and emphasizes cloud security, IAM, PAM, DLP, and governance for AI and agentic AI systems.

Location and Engagement

Location: Dallas, TX (onsite)
Duration: 8 Months + Extension
Job ID: J54010
Domain exposure: Manufacturing
Client: To Be Discussed Later

Compensation and Employment Type

Hourly rate: USD 73 per hour
Bill rate: $73/hour (C2C)
Employment type: W-2, 1099, C2C

Responsibilities

Evaluate enterprise cloud infrastructure, identify potential security vulnerabilities, and communicate risks and recommended remediation to technical and business stakeholders.
Lead and support Identity and Access Management (IAM) initiatives covering authentication, authorization, single sign-on, privileged access, conditional access, and identity governance.
Develop, implement, and maintain Data Loss Prevention (DLP) policies and security controls for confidential data across cloud applications, endpoints, collaboration tools, and AI platforms.
Design and support Privileged Access Management (PAM) solutions, including privileged account administration, credential protection, just-in-time access, session monitoring, and access governance.
Create security policies and governance standards for AI-powered technologies and autonomous AI agents, including identity management, access permissions, monitoring, and lifecycle controls.
Monitor and manage cloud application vulnerabilities and partner with development teams to establish remediation strategies and track corrective actions.
Perform security assessments, threat modeling, and architecture reviews for cloud environments, applications, and emerging technologies.
Collaborate with infrastructure, IT, and application development teams to incorporate security best practices into enterprise systems and technology initiatives.
Support incident response planning through tabletop exercises and security simulations.
Assist with compliance initiatives, internal audits, and risk assessments while maintaining security documentation, procedures, and technical standards.

Required Qualifications

Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
Experience: 5+ years in cybersecurity, cloud security, identity management, or enterprise information security.
Proven experience implementing and supporting security solutions in Microsoft Azure, AWS, or comparable enterprise cloud environments.
Hands-on IAM experience, including authentication, authorization, SSO, federation, identity governance, and conditional access.
Experience supporting PAM platforms and capabilities such as privileged account management, credential vaulting, just-in-time access, and privileged session monitoring.
Background implementing DLP, information protection, and data governance policies across cloud applications, endpoints, and collaboration environments.
Understanding of security considerations for AI and agentic AI technologies, including identity management, access controls, governance, and activity monitoring.

Technologies

Microsoft Azure
AWS

Work Authorization

US Citizen
Green Card
OPT-EAD
CPT
H-1B
H4-EAD
Other

View full job page →

3mo ago

Staff Application Security Engineer – AI & Agentic Systems

CVS Health New York, NY

New York, NY

3mo ago Closed

$107k - $284k/yr Full time Agent Ai Agent Security Ai Security

This position is no longer accepting applications (closed Sep 11, 2026).

Job Description

CVS Health seeks a Staff Application Security Engineer to strengthen application and AI security across AI-enabled and agentic systems.

Responsibilities

Develop and maintain application and AI security standards, best practices, and guardrails
Drive secure-by-design principles across application and AI development lifecycles
Establish secure design patterns for AI agents, prompt management, tool integrations, memory handling, and autonomous workflows
Partner with engineering teams to identify and reduce AI-specific risks, including prompt injection, model abuse, data leakage, and unauthorized agent actions
Act as a subject matter expert for the security of AI-enabled applications and agentic systems
Review and advise architectures using large language models, retrieval augmented generation, AI agents, and AI-powered workflows
Define and recommend controls for AI environments, including identity, authorization, data protection, observability, and governance
Collaborate with AI platform, engineering, product, and data teams to support secure and responsible AI adoption
Run threat modeling, architecture reviews, and security assessments for applications and AI-enabled systems
Perform security analysis of AI workflows, model integrations, agent interactions, and data flows
Partner with engineering teams to prioritize and remediate security findings
Evaluate emerging AI security tools and technologies to strengthen organizational security posture
Influence engineering teams to embed security controls into development processes and product roadmaps
Coordinate with privacy, compliance, legal, and risk teams to align security controls with organizational requirements
Provide guidance on AI security considerations, emerging threats, and industry best practices
Support strategic initiatives for secure AI adoption across the enterprise
Help investigate and respond to application and AI-related security events
Assist in identifying root causes and implementing long-term security improvements
Drive continuous improvement across security controls, processes, and engineering practices
Mentor security engineers and development teams on secure coding, threat modeling, and AI security best practices
Contribute to evaluating emerging AI security research, technologies, and industry standards
Advance the organization’s application and AI security strategy through innovation and technical leadership

Requirements

7+ years experience designing, building, or securing enterprise-scale applications and platforms
5+ years application security experience, including threat modeling, secure design, code review, and vulnerability management
5+ years programming experience in one or more: Python, Java, JavaScript, C#, Go
3+ years experience developing or securing AI, machine learning, or generative AI solutions
3+ years experience with public cloud platforms such as AWS, Azure, or Google Cloud Platform

Preferred Qualifications

Experience securing modern application architectures, including APIs, containers, microservices, and serverless
Strong understanding of secure SDLC and application security testing methodologies
Hands-on experience securing AI agents, RAG solutions, and LLM integrations
Experience conducting threat modeling and security assessments for AI-enabled systems
Familiarity with responsible AI principles, AI governance, and emerging AI security frameworks
Experience integrating security controls into CI/CD pipelines
Knowledge of compliance frameworks such as PCI DSS, HIPAA, NIST, HITRUST, and CSA
Ability to influence technical decisions across multiple teams and organizations
Experience contributing to security research, open-source projects, or industry communities

Technologies

Python
Java
JavaScript
C#
Go
AWS
Azure
Google Cloud Platform

Benefits

Medical, dental, and vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources, based on eligibility
CVS Health bonus, commission, or short-term incentive program (eligible in addition to the base pay range)
Award target in the company’s equity award program

Location: New York, NY (onsite)

Pay range: $106,605.00 - $284,280.00 per year

Education: Bachelor’s degree from an accredited college or university (or equivalent combination of education and relevant work experience)

This full-time role is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families.

View full job page →

Ai Agent Security Cybersecurity Jobs

Staff Application Security Engineer

Associate Director - Application Security

Cyber Security Engineer

Staff Application Security Engineer – AI & Agentic Systems

Get Ai Agent Security Cybersecurity Jobs alerts