Senior Software Engineer - Application Security

Emergent Labs; Bengaluru; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Emergent Labs seeks security-minded engineers to secure AI-generated applications at global scale. You will design guardrails across authentication, data access, APIs, and business logic, and build secure-by-default generation frameworks.

The role emphasizes collaboration with product and engineering teams to prevent insecure code from being produced by AI agents. You will conduct threat modeling for dynamic, multi-tenant app creation flows, build security primitives, and perform red-team

Qualifications

• 5–10+ years in Application Security
• Experience collaborating with product/engineering teams
• Strong coding ability in Python and JS/TS

Responsibilities

• Secure AI-generated apps at scale across multi-tenant environments
• Define security patterns for AI-generated applications
• Enforce auth, data access, APIs, and business logic guardrails
• Build secure-by-default generation frameworks
• Collaborate with AI/agent pipelines to prevent insecure code
• Create validation layers (static + semantic) for generated code
• Detect prompt injection and adversarial input patterns
• Perform threat modeling for dynamic app creation flows
• Develop developer-facing security primitives (auth, SDKs)
• Secure API gateways and rate limiting
• Implement input/output validation for LLM-driven flows
• Lead red-team exercises on AI-generated apps
• Feed learnings back into generation systems

Skills

Application security

Python

JavaScript/TypeScript

Backend systems

OWASP Top 10

Auth & session management

API security

Injection & sandbox escapes

Job description

Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications.

Since our public launch, we've crossed $130M in ARR and grown to over 10M users across 190+ countries, who have built 12M+ applications on Emergent. We're backed by Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.

We're solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by repeat founders, Olympiad medalists, IIT & IIM alumni, and leaders from Google, Amazon, and Dropbox.

We're hiring builders who want ownership, speed, and impact at global scale.

The Role:
Emergent runs a massive, multi-tenant, AI-driven execution environment where code is generated and executed continuously. You will secure the infrastructure that powers autonomous software creation.

What You’ll Do:

What You’ll Do

Secure AI-generated applications at scale

• Define security patterns for applications generated by AI agents
• Enforce guardrails across auth, data access, APIs, and business logic
• Build frameworks to ensure secure-by-default app generation

Design "secure generation" systems

• Work directly with AI/agent pipelines to prevent insecure code from being produced
• Build validation layers for generated code (static + semantic)
• Detect prompt injection and adversarial input patterns

Own application threat modeling

• Identify vulnerabilities in dynamic app creation flows
• Analyze risks in multi-tenant user-generated environments
• Build reusable threat models for agent-driven systems

Build developer-facing security primitives

• Auth systems, permission frameworks, secure SDKs
• Secure API gateways and rate limiting
• Input/output validation layers for LLM-driven flows

Red team AI-generated apps

• Break applications generated by Emergent agents
• Identify systemic weaknesses vs one-off bugs
• Feed learnings back into generation systems

What We’re Looking For

• 5–10+ years in Application Security
• Strong coding ability (Python, JS/TS, backend systems)
• Deep understanding of:
• OWASP Top 10
• Auth & session management
• API security
• Injection & sandbox escape vectors
• Experience working closely with product/engineering teams

What Sets You Apart

• You think in systems, not vulnerabilities
• You want to prevent insecure code from ever existing
• Experience with:
• AI/LLM systems
• Prompt injection & output validation
• Secure code generation systems

Why Emergent

• Build security for AI systems that build software
• Operate at global scale (millions of apps, millions of users)
• Work directly with founders and core engineering
• Solve problems that don’t exist anywhere else yet