Staff Engineer - Security

Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications.

Since our public launch, we've crossed $130M in ARR and grown to over 10M users across 190+ countries, who have built 12M+ applications on Emergent. We're backed by Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.

We're solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by repeat founders, Olympiad medalists, IIT & IIM alumni, and leaders from Google, Amazon, and Dropbox.

We're hiring builders who want ownership, speed, and impact at global scale.

At Emergent, security goes beyond securing traditional applications and infrastructure. We are building AI systems that generate and execute software at massive scale.

As a Staff Security Engineer, you will own security across the full stack — from AI-generated applications and agent pipelines to the cloud infrastructure and runtime environments where that code executes.

You will work across Application Security, Product Security, Cloud Security, Infrastructure Security, and Runtime Defense to build systems that are secure by design and resilient at scale.

• Define security patterns and guardrails for applications generated by AI agents.
• Build secure-by-default frameworks across authentication, authorization, data access, APIs, and business logic.
• Identify and prevent vulnerabilities in dynamically generated applications.
• Build validation layers for AI-generated code, including static and semantic validation.
• Detect prompt injection, adversarial inputs, and other AI-specific attack patterns.

• Design secure, multi-tenant environments for executing untrusted, AI-generated code.
• Build isolation across compute, network, and storage layers.
• Prevent container escapes, privilege escalation, lateral movement, and other runtime attacks.
• Harden AWS/GCP infrastructure across IAM, VPCs, secrets, workloads, and service-to-service communication.
• Design and implement zero-trust security architectures.

• Threat model systems spanning AI agents, generated applications, APIs, cloud infrastructure, and runtime environments.
• Identify systemic security risks across multi-tenant and agent-driven architectures.
• Develop reusable threat models and security patterns for AI-native systems.
• Assess attack paths across both application and infrastructure layers.

• Build detection capabilities for abnormal execution, malicious workloads, and data-exfiltration attempts.
• Design logging, SIEM, monitoring, and real-time alerting systems.
• Develop security controls that detect and prevent attacks across application and infrastructure layers.
• Red-team AI-generated applications and execution environments to identify systemic weaknesses.

• Secure build and deployment pipelines used by AI agents.
• Prevent software supply-chain attacks and insecure code propagation.
• Ensure artifact integrity throughout the development and deployment lifecycle.
• Feed security learnings back into AI generation and engineering systems.

• Design authentication and authorization frameworks.
• Build secure SDKs, APIs, gateways, rate limiting, and input/output validation layers.
• Develop reusable security tooling and frameworks that engineering teams can adopt at scale.
• Work closely with engineering and product teams to make security part of system design rather than a post-development review.

• 8–15+ years of security engineering experience, with strong hands-on experience across both Application/Product Security and Cloud/Infrastructure Security.
• Strong coding and automation skills in Python, JavaScript/TypeScript, or backend systems.
• Deep understanding of application security fundamentals, including:
• OWASP Top 10
• Authentication & authorization
• API security
• Injection vulnerabilities
• Secure software development
• Threat modeling
• Strong cloud and infrastructure security experience across:
• AWS/GCP
• Kubernetes and containers
• IAM and secrets management
• Network security
• Container security
• Runtime protection
• Multi-tenant environments
• Experience designing and securing systems that execute untrusted or user-generated code.
• Ability to work across application, infrastructure, and platform layers rather than operating within a single security domain.
• Experience partnering closely with engineering and product teams and driving security initiatives from architecture through implementation.

• Experience securing AI/LLM or agentic systems.
• Experience with prompt injection, output validation, and AI-specific threat models.
• Experience with sandboxed or ephemeral execution environments.
• Experience securing high-scale, multi-tenant platforms.
• Experience building security systems rather than only identifying vulnerabilities.
• Strong systems thinking — you understand how an application vulnerability can become an infrastructure or runtime risk, and vice versa.
• Experience building scalable security solutions for environments where millions of applications or workloads may be generated and executed dynamically.

• Build security for AI systems that build software.
• Solve security problems spanning application, cloud, infrastructure, and AI systems.
• Operate at global scale across millions of applications and users.
• Work directly with founders and core engineering teams.
• Solve security challenges that are emerging with autonomous software creation.