- San Francisco, California, United States
- Full-time · Senior
- $175K–$215K per year
- 5+ years
You’ll be the hands‑on security lead embedded with core product teams to secure agentic workloads end‑to‑end, from SDK through LangSmith/Graph services and customer integrations. You’ll define our security roadmap, land immediate hardening wins, and raise the bar on how AI infra is protected in production.
Compensation
Annual salary range: $175,000-$215,000 USD for Senior Engineers
Responsibilities
- Own product & platform security: Design and drive application/infrastructure security controls across LangSmith, LangGraph, and the LangChain SDK ecosystem (Python/TS/Go).
- Secure-by-default authN/Z: Evolve SSO/SAML/OIDC/SCIM, token lifecycles, service‑to‑service auth, and tenant isolation for cloud and self‑hosted customers.
- Ship code & reviews: Land secure designs, write PRs, and introduce lightweight checks (linters, dependency/supply‑chain scanning, SBOM/SLSA provenance).
- Hardening & operations: Network segmentation/Zero Trust, Kubernetes posture, secrets management, key rotation, least‑privilege IAM, egress controls.
- Incident readiness: Develop IR runbooks, detection rules, and tabletop exercises; lead post‑incident forensics and blameless RCAs.
Requirements
- Nice to have: TypeScript
- Nice to have: SaaS security
- Nice to have: Self-hosted offerings security
- Nice to have: SOC 2
- Nice to have: ISO 27001