SF Onsite Security Engineer for AI Engines

Hone; Witney; On-site; GBP 113,000 - 144,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Maternity and parental support

Relocation assistance

Job summary

Hone is hiring a security engineer to own isolation, identity, and defenses for engine-based AI systems operating inside sensitive enterprise environments. You will design sandboxing, credentials, and robust security controls across multi-tenant deployments.

Join a fast-growing startup building agent-based AI engines. You will work on security across the stack, including threat modeling, incident response, and tooling for detection and response.

Qualifications

• 2+ years of security engineering experience or equivalent depth from research, CTFs, open source or your own projects
• Time at a fast-growing startup
• You've designed and built security systems from scratch, not just audited them
• You've secured production systems under real load and handled real incidents
• Strong fundamentals: cloud security, identity and access, networking, isolation, application security
• You use coding agents every day and still understand every line you ship
• You break and build things for fun because you genuinely care about how systems fail

Responsibilities

• Isolation and network sandboxing for long-running agents: default-deny egress, scoped access, tenant isolation
• Identity and credentials for engines: per-engine service identities, short-lived scoped credentials, and a broker so agents never hold raw secrets
• Defenses against prompt injection, data exfiltration and tool misuse across untrusted inputs
• Permissions and audit: RBAC, approval gates, and a full record of every action an engine takes and why
• Security architecture for single-tenant and customer-VPC deployments
• Internal AI tooling for detection, review and response, including agents that red-team our own engines

Skills

Security engineering

Startup experience

Security system design

Production security

Cloud security

IAM & access

Networking

Application security

Agent tooling

Job description

Hone is hiring a security engineer to own isolation, identity, and defenses for engine-based AI systems operating inside sensitive enterprise environments. You will design sandboxing, credentials, and robust security controls across multi-tenant deployments.

Join a fast-growing startup building agent-based AI engines. You will work on security across the stack, including threat modeling, incident response, and tooling for detection and response.