Senior Security Engineer - Cloud & AI Platform

Security Engineer, Agentic AI

Are you a visionary Security Engineer ready to define the future of enterprise AI security? At Ema, we're not just building AI; we're building an entirely new category of AI Employees that revolutionize HR, IT, and Finance. Our autonomous AI agents handle the busy work across the enterprise, freeing people to focus on meaningful contributions. Backed by industry giants like Accel and propelled by leadership from Google, Coinbase, and Okta, Ema is at the bleeding edge of Agentic AI, deploying real systems that manage critical business processes at scale across Silicon Valley, London, Bangalore, and Vancouver.

This isn't just another security role. Our AI agents interact with highly sensitive enterprise data and systems. You'll be at the forefront of securing not just an application, but an intelligent, autonomous entity operating in complex multi-tenant environments — from cloud to on-prem and air-gapped deployments. You'll tackle unprecedented zero-trust challenges where the "code" isn't static logic but non-deterministic models making live API calls against sensitive customer data. With agents orchestrating over 100 LLMs, calling third-party tools via MCP, executing code in sandboxes, and driving headless browsers, every interaction presents a novel attack surface that you will define and defend.

Your Mission & Impact

As a Security Engineer specializing in Agentic AI, you will be instrumental in ensuring our AI Employees and the platform they run on are secure by design. Your expertise will directly shape the trust and reliability of enterprise AI.

AI and Agent Security Leadership:

Pioneer Threat Modeling: Proactively identify and mitigate risks for new AI agent features, including direct and indirect prompt injection, jailbreaks, data exfiltration through agent outputs, and over-privileged tool use.
Engineer Agentic Guardrails: Design and implement robust security controls such as least-privilege tool and connector scopes, human-in-the-loop approvals for high-risk actions, and sophisticated output filtering mechanisms.
Ensure Data Sovereignty: Enforce stringent tenant and data isolation across Retrieval Augmented Generation (RAG), context stores, and model calls to guarantee no customer's data leaks into another's context.
Secure the AI Supply Chain: Establish security best practices for model and provider vetting, third-party MCP servers and connectors, and implement prompt and configuration versioning.
Drive Adversarial Resilience: Lead AI red-team exercises and integrate automated adversarial tests (e.g., prompt injection suites) directly into our CI/CD pipelines.

Cloud and Platform Security Expertise:

Fortify Infrastructure: Define and enforce security baselines for Kubernetes and cloud infrastructure, covering RBAC, network policies, workload identity, secrets management, and per-tenant network isolation.
Integrate DevSecOps: Embed security seamlessly into our CI/CD pipelines through IaC scanning, SAST, dependency scanning, and robust policy-as-code guardrails.

Beyond Your Core: Shaping the Future

Innovate AI-Aware Detection: Contribute to advanced detection capabilities by logging prompts, tool calls, and agent actions, and developing alerts for anomalous agent behavior.
Elevate Compliance & Trust: Partner with our Security & Compliance Lead to define technical controls and gather evidence for critical certifications including SOC 2 Type II, ISO 27001, HIPAA, and ISO 42001, while also contributing to the NIST AI RMF.

What You Bring

Experience: 5+ years in cloud security, application security, or DevSecOps roles (GCP/Azure Preferred).
Technical Depth: Deep, hands-on experience with Kubernetes and broader cloud security principles.
Automation Prowess: Proven ability to automate security processes using Infrastructure-as-Code (Terraform/Helm) combined with Python or Bash scripting.
AI Security Acumen: A working understanding of Large Language Model (LLM) application risks (e.g., OWASP Top 10 for LLM Applications) and how agentic systems can fail.
Influence & Collaboration: Comfortable influencing engineers and product teams without direct formal authority, fostering a security-first culture.

Bonus Points (Nice-to-Haves):

Hands-on experience securing LLM, RAG, or agentic systems in production environments.
Experience with AI red teaming or familiarity with MITRE ATLAS.
Proficiency with CNAPP/CSPM tooling and SIEM/detection engineering.
Contributions to AI security research, open-source tools, or competitive CTF challenges.

Why Join Ema?

At the Frontier of AI: Secure agentic systems that are not just theoretical, but actively driving real enterprise transformation and defining a new category of software.
Security is the Product: For Ema, security isn't an afterthought or a checkbox; it’s a core feature. Enterprise CISOs evaluate our security as a primary buying factor, making your work directly critical to our success.
Security as a Peer, Not a Gate: You'll report directly to the Security & Compliance Lead and partner closely with Engineering and Product leadership. You’ll be in design reviews from day one, with a tangible impact on every feature that ships.
True Ownership: Help set the foundational standard for enterprise trust in AI agents and embed the security DNA into a category-defining company.
Elite Talent: Collaborate with exceptional engineers and researchers from top-tier tech companies who share a passion for deep execution and innovation.

Ema's Culture & Values

High Bar on Quality: We pursue excellence and expect world-class execution in everything we do.
Ownership & Accountability: We take full responsibility for our work and the outcomes we deliver.
Impact-Driven Approach: We set ambitious goals and measure our success by real-world impact.
No Hierarchy, Just Execution: Everyone is an individual contributor focused on delivering results and driving progress.

Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.

Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics.