About the company
Our client is an AI software company.
The role
Raydar is recruiting for this role on behalf of our client. Design and build the security foundations for autonomous software agents. Work hands-on as a senior individual contributor, writing, testing and shipping production code while owning the security architecture and its implementation quality.
What you'll do
- Define the threat model and roadmap, mapping trust boundaries and data flows, ranking risks and setting testable acceptance criteria for each deployment.
- Build execution controls that constrain generated code, privileged tools and extensions, validating third-party sandboxing where it is used.
- Implement scoped permissions and approvals so automated actions never exceed the authority of the user or organization that started them.
- Create safe separations between services, manage temporary tokens and identity links, and keep each customer's data isolated.
- Create customer-controlled action records, approval logs and audit exports, and make sensitive operations fail safely when dependent services are unavailable.
- Harden desktop and enterprise releases, including packaging, updates and restricted-network deployment profiles.
- Test defenses with hostile inputs and cross-component checks, triage weaknesses, gate releases on security verification, and run response work when incidents occur.
- Write understandable security materials and assist clients during their external control assessments.
Requirements
What we're looking for
- Strong production software engineering experience, with complex systems taken from design through rollout and maintenance.
- A minimum of one year in security-focused software work, preferably on desktop software or similar systems.
- Sound foundations in core computer science, covering algorithm design, parallel execution, OS internals and distributed architecture.
- Working knowledge of access control, credential management, sandboxing of processes and network perimeter protections.
- Comfort working across backend and operating system boundaries and debugging failures across multiple processes.
- Clear understanding of AI-specific threats such as untrusted model output, prompt injection and hostile tool inputs.
- Able to set order among unclear goals and communicate compromises and protection promises to engineers and customers.
- Ability to write production code every week, working full-time on-site in San Francisco.
Bonus points
- Experience at well-known companies building developer or desktop software with strict IP and security controls.
- Background in agent frameworks, programmer tooling or interoperability standards for tools.
- Experience with Python or TypeScript.
- Familiarity with hardening native desktop software, process sandboxing, and secure build and distribution pipelines.
- Experience with identity federation and secrets brokering, or with deployments inside customer-controlled or isolated networks.
- Experience with engineering design software integrations or security for regulated, IP-sensitive products.
Benefits
Compensation and benefits
- Base salary: USD 200K to 330K per year
- Equity
Location and work model
- San Francisco, California, United States
- On-site, five days a week
- Full-time
Skills Required
- Strong production software engineering experience taking complex systems from design through rollout and maintenance
- At least one year of security-focused software experience
- Foundational knowledge of algorithm design, parallel execution, operating system internals, and distributed architecture
- Working knowledge of access control, credential management, process sandboxing, and network perimeter protections
- Experience working across backend and operating system boundaries and debugging multi-process failures
- Understanding of AI-specific threats, including untrusted model output, prompt injection, and hostile tool inputs
- Ability to prioritize ambiguous goals and communicate tradeoffs and security guarantees
- Ability to write production code weekly
- Full-time, on-site availability in San Francisco
- Experience with Python or TypeScript
- Experience building developer or desktop software with strict intellectual property and security controls
- Background in agent frameworks, programmer tooling, or tool interoperability standards
- Experience hardening native desktop software, process sandboxing, and secure build and distribution pipelines
- Experience with identity federation, secrets brokering, or customer-controlled and isolated network deployments
- Experience with engineering design software integrations or security for regulated, IP-sensitive products
What We Do
Raydar is a talent acquisition and business consulting firm that connects world-class and emerging talent with growing organizations. It supports companies through team development, strategic hiring, and customized growth solutions, helping clients recruit roles such as engineers, product managers, executives, legal counsel, and quantitative traders. Raydar focuses on understanding each organization’s needs, culture, and long-term goals to build high-impact teams.
