Product Security Engineer — AI Platform (Remote)

Emergence AI; Gold Coast City; Hybride; AUD 150 000 - 190 000; Plein temps

Avantages offerts par ce poste

Comprehensive health benefits

Flexible PTO and holidays

Flexible hybrid/remote work

Résumé du poste

Emergence AI is building the future of enterprise automation through autonomous agent orchestration. You will be embedded with engineering to own the security of our agentic AI platform — from threat modeling new agent capabilities to identifying and remediating risk across our multi-agent workflows.

Reporting to the CISO, you will work closely with engineering to integrate security into design, development, and release cycles.

Qualifications

• 5–8 years of experience in application security, product security, or a closely related security engineering discipline.
• Hands-on experience with threat modeling methodologies (STRIDE, PASTA, or equivalent).
• Strong background in secure SDLC practices and AppSec tooling (SAST, DAST, SCA).
• Familiarity with cloud-native environments — Kubernetes, containerized workloads, and CI/CD pipelines.
• Experience conducting security assessments of APIs, microservices, and third-party integrations.
• Excellent written communication — you can produce a security advisory or risk assessment that engineers and executives can both act on.

Responsabilités

• Perform threat modeling and secure design reviews for new agent capabilities, including tool use, memory systems, and multi-agent orchestration flows.
• Identify and remediate security risks in agentic workflows — prompt injection, privilege escalation across agents, unauthorized tool invocation, and trust boundary violations.
• Partner with engineering as an embedded security partner during design, development, and release cycles — not as a gatekeeper, but as a collaborator.
• Define and maintain secure development standards and patterns specific to LLM-based and agentic systems.
• Research emerging attack surfaces relevant to AI agent platforms and translate findings into actionable mitigations.
• Lead security assessments of internal tools, third-party integrations, and open source dependencies.
• Contribute to supply chain security controls including dependency pinning, SBOM management, and CI/CD hardening.
• Support incident response investigations with a focus on agent and application-layer events.
• Support enterprise customer security reviews and trust conversations related to agent security posture.
• Contribute to SOC 2 Type II evidence collection and control maintenance alongside the broader ITSEC team.
• Collaborate with the DevSecOps Engineer on security tooling, pipeline controls, and infrastructure security.
• Produce clear written documentation — risk assessments, security advisories, runbooks — that can be shared internally and externally.

Connaissances

Threat modeling

AppSec tooling

Secure SDLC

Cloud-native (Kubernetes)

API and microservices security

Technical writing

Outils

SAST

DAST

SCA

Kubernetes

CI/CD

Description du poste

Emergence AI is building the future of enterprise automation through autonomous agent orchestration. You will be embedded with engineering to own the security of our agentic AI platform — from threat modeling new agent capabilities to identifying and remediating risk across our multi-agent workflows.

Reporting to the CISO, you will work closely with engineering to integrate security into design, development, and release cycles.