Staff Security Engineer

Accountabilities: The Staff Security Engineer will define and execute security priorities, taking direct responsibility for improving the organization's security posture and ensuring that critical risks are addressed. Key responsibilities include: Establish security priorities and drive remediation efforts through to verified completion. Identify application vulnerabilities through code reviews, penetration testing, and specialized red-team exercises targeting AI agents. Conduct hands-on security assessments across applications, APIs, cloud infrastructure, and AI-powered workflows. Collaborate with ITOps, Platform, and Product Engineering teams to strengthen infrastructure security and integrate security controls into delivery pipelines. Design and implement automated security checks within existing development workflows, reducing reliance on slow or blocking manual application security reviews. Harden cloud environments through improved access controls, least-privilege permissions, network segmentation, container isolation, and secrets management. Build detection capabilities for suspicious user and agent activity, including potential exploitation of AI-specific vulnerabilities. Lead security incident response, investigate threats, coordinate remediation, and improve defenses based on lessons learned. Develop internal security tooling, automation, and testing frameworks to identify vulnerabilities and validate protective controls. Assess emerging threats involving prompt injection, unauthorized data access, data exfiltration, and insecure agent-generated code. Take ownership of security outcomes by balancing risk reduction with engineering velocity and communicating decisions clearly to technical teams and leadership. Requirements The ideal candidate is a hands-on security engineer with strong offensive security expertise, solid software engineering capabilities, and a deep understanding of the risks associated with AI-powered systems. Required qualifications include: Strong background in application security, with the ability to identify exploitable vulnerabilities and recommend effective remediation. Practical penetration testing and offensive security experience across web applications, APIs, and cloud infrastructure. Strong understanding of infrastructure and cloud security fundamentals, including IAM, network segmentation, container security and isolation, secrets management, and logging. Experience implementing security detections and directly managing incident response activities. Strong understanding of AI coding agents and LLM-based systems, including their architecture, limitations, vulnerabilities, and potential manipulation techniques. Software engineering skills sufficient to develop custom security tools, automation, and testing frameworks. Sound technical judgment under pressure, with the ability to evaluate risks against release priorities and make well-reasoned decisions. Excellent communication skills, including the ability to explain security risks and remediation strategies to engineers and company leadership. Proactive mindset, with the ability to identify security gaps independently and investigate emerging threats without relying on predefined procedures. Additional qualifications considered an advantage include: Experience securing sandboxed or multi-tenant code execution environments. Demonstrated red-team, bug bounty, or Capture the Flag (CTF) experience. Experience establishing or managing security programs and compliance frameworks such as ISO 27001 or SOC 2 within a small company. Benefits Competitive equity opportunities. Significant ownership, autonomy, and responsibility within a small, highly skilled team. Opportunity to work at the forefront of AI-powered productivity and autonomous agent technology. AI-first working environment with access to tools that expand individual and team capabilities. Direct collaboration with experienced engineers, senior leadership, and company founders. Flat organizational structure that encourages initiative, independent decision-making, and contributions based on expertise. Fully remote-first work environment with global hiring opportunities. Access to an in-person coworking hub in Barcelona, with weekly coworking opportunities. Opportunity to see the direct impact of your work through daily use of the platform.