Founding Security Engineer

About the Role

AIUC builds standards and insurance for frontier AI. We are seeking our first security hire, a Founding Security Engineer, to join as we open our product to the world. This role involves owning security end-to-end across our product, evaluation platform, and internal systems, working directly with the founders. You will tackle unsolved agent security problems, prove solutions on our systems, and establish the playbook for other companies. The role offers the opportunity to become the security leader advising our consortium of 300+ CISOs, shaping AIUC-1 security requirements, and defining agent security in practice. This is a challenging role requiring the ability to make difficult decisions and prioritize security as the fast path.

Key Responsibilities

• Ensure the security of our product as it scales to enterprise customers.
• Build the secure foundation for running agents, including sandboxing, agent credential access, and core development.
• Own company-wide security: network, vendors, access, data, and customer security reviews.
• Proactively address emerging risks and new attack classes.
• Respond rapidly to incidents and resolve issues before they escalate.
• Integrate learnings into AIUC-1 and share insights with our CISO consortium through sessions and publications.

Requirements & Tech Stack

• Engineer first mentality: experience building production systems and capable of meeting our engineering bar.
• Cloud and infrastructure security: experience securing least-privilege IAM, SSO, clean dev/prod separation, KMS and secrets management, secure databases, user management, and identity systems.
• Agent builder: experience building an agent harness, understanding containment through sandboxing, tool permissions, credential isolation, and data-leak controls.
• Ability to own outcomes end-to-end and communicate effectively.
• Experience building detection, logging, and incident response capabilities.
• Experience securing the corporate surface, including SSO, devices, and SaaS.
• Security as code: experience reviewing infrastructure changes in Terraform and automating controls.

Qualifications

• Proven experience as a founding security hire at a technical or regulated-industry company, building a security program from scratch.
• Alternatively, experience as a core engineer at a security company where security was the product.

Nice to Haves

• Experience translating security research into production engineering, such as reproducing new agent attacks and implementing defenses.
• Deep architecture experience in distributed systems, ML pipelines, or large-scale platforms.
• Enjoyment in learning from enterprise security teams and our CISO consortium about how agents impact their environments.