SHORTList

AI Security Architect

JOB INFO

Apply

Apply for this job directly on SHORTList.

Referral

Share your custom referral link for this job with qualified candidates. Earn the referral you lead to a hire.

COMPANYEmergent

The Role: Security at Emergent isn't a checkbox, it's a core engineering discipline. With 6M+ users generating and deploying real applications every day, our attack surface is unique. We're looking for a Security Engineer who thinks like an attacker, builds like a product engineer, and operates with the urgency of a founder. You'll own security across the full stack, from AI agent pipelines and cloud infrastructure to the applications our users generate and deploy at scale.

What You'll Do:

  • Secure the AI-native stack end to end: design, implement, and continuously improve security controls across AI agent pipelines, multi-tenant cloud infrastructure, APIs, and user-generated application environments.
  • Lead threat modelling and attack surface analysis: proactively identify risks in new product features, infrastructure changes, and AI-generated code patterns. Catch vulnerabilities at design time, not after deployment.
  • Build and own vulnerability management: run automated security scans (SAST, DAST, SCA), triage findings by exploitability and impact, drive remediation, and track resolution to closure.
  • Harden AI-generated application environments: define and enforce sandboxing strategies, code execution boundaries, secret handling standards, and runtime security controls.
  • Drive security in the SDLC: embed security tooling and review gates into CI/CD pipelines, champion secure coding practices, conduct code reviews, and run internal red-teaming exercises.
  • Detect, respond, and learn: build detection coverage using cloud-native logging and SIEM tooling. Lead incident response, triage, contain, eradicate, and produce clear post-mortems.
  • Own compliance and trust: maintain and mature security posture against SOC 2, ISO 27001, and cloud security benchmarks. Serve as technical point of contact for customer security reviews.

What We're Looking For:

  • 8 to 12 years of hands-on security engineering experience in a fast-moving product or cloud environment.
  • Strong application security foundation, able to read code (Python, JS/TS, SQL), identify vulnerabilities (OWASP Top 10, injection, auth flaws), and drive fixes with engineering teams.
  • Solid cloud security experience across AWS, GCP, or Azure including IAM, network security groups, secrets management.