Lead Agentic Security Engineer

As a Lead Agentic Security Engineer, you will provide technical leadership for security engineering across the organization. You will set technical direction, own critical security capabilities, drive cross-team security initiatives, and mentor engineers at all levels. You are accountable for the maturity and effectiveness of security engineering, balancing risk, delivery, and engineering realities. 

This is a technical leadership role, not a people-management role — though it carries significant influence and mentorship responsibility. 

Duties and accountabilities 

Technical strategy and ownership 

• Define and drive the technical direction for security engineering. 

• Own critical security domains and capabilities end to end (AppSec, CloudSec, CI/CD security, vulnerability management). 

• Set standards, patterns, and guardrails that scale across teams. 

• Make and own high-impact, risk-based security decisions. 

Cross-team leadership 

• Lead security initiatives spanning multiple engineering teams. 

• Act as the senior security point of contact for engineering leadership. 

• Influence architecture and design across the organization. 

• Align security efforts with business and delivery priorities. 

Engineering and automation 

• Drive security automation and tooling strategy (SAST, SCA, DAST, IaC, container security), including AI-assisted and AI-augmented tooling for triage, correlation, and remediation guidance. 

• Evaluate and apply AI and generative AI tools — for example AI-assisted code review, AI-powered vulnerability triage, and LLM-based threat and log analysis — to improve signal quality, coverage, and developer experience, while validating their output rather than trusting it blindly. 

• Ensure security platforms are reliable, scalable, and maintainable. 

• Build the team's fluency with AI-assisted engineering tools (e.g., AI coding assistants, AI-enabled security scanners) and set guardrails for their safe, effective use, including awareness of AI/LLM-specific risks such as prompt injection, model and data supply-chain exposure, and sensitive-data leakage. 

Risk, incident, and compliance 

• Lead response and root-cause analysis for significant security incidents. 

• Identify systemic risks and drive long-term remediation. 

• Own security engineering input into compliance efforts (ISO 27001, SOC 2, FedRAMP). 

• Coordinate external engagements (e.g., penetration testing vendors). 

Mentorship and capability building 

• Mentor engineers and emerging leads (including Associate Security Leads). 

• Raise the overall security capability of engineering teams, including fluent, responsible use of AI-assisted tools. 

• Champion a strong, pragmatic security culture. 

What success looks like 

• Security engineering direction is clear, pragmatic, and adopted. 

• Critical risks are proactively identified and addressed. 

• Engineering teams trust and act on security guidance. 

• Security maturity improves measurably across the organization, including effective adoption of AI-assisted security tooling. 

• Engineers grow under your mentorship. 

• Typically 5+ years in security engineering, software engineering, or platform engineering. 

• Proven track record owning security capabilities or programs at scale. 

• Deep expertise across multiple domains (AppSec, CloudSec, CI/CD security, architecture). 

• Strong hands-on engineering and automation background. 

• Demonstrated technical leadership and cross-team influence. 

• Practical fluency with AI tools in an engineering context — for example AI coding assistants, AI-assisted security scanning and triage, or LLM-based analysis — and the judgment to validate their output rather than trust it blindly. 

• Demonstrated experience in security engineering with hands-on involvement in automated security solutions. 

• Working knowledge of DevSecOps principles and practices. 

• Practical experience with CI/CD tools (e.g., Bitbucket, Jenkins, GitLab, GitHub Actions, or equivalent). 

• Proficiency in security platforms, vulnerability management tools, and at least one scripting language (e.g., Python, Bash). 

• Comfort working with AI-assisted development and security tools (e.g., AI coding assistants, AI-driven SAST/DAST/SCA triage) as part of the day-to-day toolkit, with the judgment to review and validate AI-generated output. 

• Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and remediation approaches. 

• Strong communication and collaboration skills with the ability to engage cross-functional teams. 

• Familiarity with containerization tools (e.g., Docker, Kubernetes). 

• Knowledge of security standards (e.g., NIST, ISO 27001, CIS). 

We embrace flexibility and hybrid work opportunities to support diverse needs and lifestyles, while also valuing inclusive workplace experiences. By fostering a sense of community, we drive innovation, strengthen connections, and nurture belonging. Our commitment ensures you can work in a way that suits you best, while also engaging with colleagues to share ideas and build meaningful relationships.