Lead Agentic Security Engineer

As a Lead Agentic Security Engineer, you will provide technical leadership for security engineering across the organization. You will set technical direction, own critical security capabilities, drive cross-team security initiatives, and mentor engineers at all levels. You are accountable for the maturity and effectiveness of security engineering, balancing risk, delivery, and engineering realities.

This is a technical leadership role, not a people-management role — though it carries significant influence and mentorship responsibility.

Duties and accountabilities

Technical strategy and ownership

• Define and drive the technical direction for security engineering.

• Own critical security domains and capabilities end to end (AppSec, CloudSec, CI/CD security, vulnerability management).

• Set standards, patterns, and guardrails that scale across teams.

• Make and own high-impact, risk-based security decisions.

Cross-team leadership

• Lead security initiatives spanning multiple engineering teams.

• Act as the senior security point of contact for engineering leadership.

• Influence architecture and design across the organization.

• Align security efforts with business and delivery priorities.

Engineering and automation

• Drive security automation and tooling strategy (SAST, SCA, DAST, IaC, container security), including AI-assisted and AI-augmented tooling for triage, correlation, and remediation guidance.

• Evaluate and apply AI and generative AI tools — for example AI-assisted code review, AI-powered vulnerability triage, and LLM-based threat and log analysis — to improve signal quality, coverage, and developer experience, while validating their output rather than trusting it blindly.

• Ensure security platforms are reliable, scalable, and maintainable.

• Build the team's fluency with AI-assisted engineering tools (e.g., AI coding assistants, AI-enabled security scanners) and set guardrails for their safe, effective use, including awareness of AI/LLM-specific risks such as prompt injection, model and data supply-chain exposure, and sensitive-data leakage.

Risk, incident, and compliance

• Lead response and root-cause analysis for significant security incidents.

• Identify systemic risks and drive long-term remediation.

• Own security engineering input into compliance efforts (ISO 27001, SOC 2, FedRAMP).

• Coordinate external engagements (e.g., penetration testing vendors).

Mentorship and capability building

• Mentor engineers and emerging leads (including Associate Security Leads).

• Raise the overall security capability of engineering teams, including fluent, responsible use of AI-assisted tools.

• Champion a strong, pragmatic security culture.

What success looks like

• Security engineering direction is clear, pragmatic, and adopted.

• Critical risks are proactively identified and addressed.

• Engineering teams trust and act on security guidance.

• Security maturity improves measurably across the organization, including effective adoption of AI-assisted security tooling.

• Engineers grow under your mentorship.

• Typically 5+ years in security engineering, software engineering, or platform engineering.

• Proven track record owning security capabilities or programs at scale.

• Deep expertise across multiple domains (AppSec, CloudSec, CI/CD security, architecture).

• Strong hands-on engineering and automation background.

• Demonstrated technical leadership and cross-team influence.

• Practical fluency with AI tools in an engineering context — for example AI coding assistants, AI-assisted security scanning and triage, or LLM-based analysis — and the judgment to validate their output rather than trust it blindly.

Scope and expectations

• Technical leadership role, accountable for security engineering outcomes.

• Owns strategy and direction, not just delivery.

• Expected to influence without formal authority.

• Expected to challenge unsafe designs and decisions.

• Not a people-manager role (unless explicitly combined).

Nice to have

• Experience leading security in an enterprise product environment.

• Track record influencing engineering-wide standards.

• Experience mentoring senior engineers and leads.

• Experience applying AI/LLM tools to security engineering (e.g., AI-assisted threat modeling, AI-powered vulnerability correlation) and awareness of securing AI-enabled applications and pipelines.

• Relevant advanced certifications (not mandatory).

Qualifications

Core required qualifications

• Demonstrated experience in security engineering with hands-on involvement in automated security solutions.

• Working knowledge of DevSecOps principles and practices.

• Practical experience with CI/CD tools (e.g., Bitbucket, Jenkins, GitLab, GitHub Actions, or equivalent).

• Proficiency in security platforms, vulnerability management tools, and at least one scripting language (e.g., Python, Bash).

• Comfort working with AI-assisted development and security tools (e.g., AI coding assistants, AI-driven SAST/DAST/SCA triage) as part of the day-to-day toolkit, with the judgment to review and validate AI-generated output.

• Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and remediation approaches.

• Strong communication and collaboration skills with the ability to engage cross-functional teams.

• Familiarity with containerization tools (e.g., Docker, Kubernetes).

• Knowledge of security standards (e.g., NIST, ISO 27001, CIS).

Preferred qualifications

• 5+ years of experience in security engineering, software engineering, or platform engineering.

• Proven track record owning security capabilities or programs at scale.

• Deep expertise across multiple security domains (AppSec, CloudSec, CI/CD security, architecture).

• Advanced proficiency in security automation, tooling strategy, and infrastructure-as-code security, including experience integrating AI-based tools into automated pipelines.

• Demonstrated technical leadership and ability to influence cross-team decisions without formal authority.

• Experience leading security incident response and root-cause analysis.

• Track record mentoring engineers and emerging security leads.

• Experience influencing engineering-wide security standards and practices, including guidance on the responsible use of AI tools (e.g., secure use of AI coding assistants, AI/LLM application security).

• Relevant advanced certifications (e.g., CISSP, CCSK, or equivalent).

We embrace flexibility and hybrid work opportunities to support diverse needs and lifestyles, while also valuing inclusive workplace experiences. By fostering a sense of community, we drive innovation, strengthen connections, and nurture belonging. Our commitment ensures you can work in a way that suits you best, while also engaging with colleagues to share ideas and build meaningful relationships.