Staff Engineer - Security

Procore Technologies; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Procore Technologies in Bengaluru is seeking a Staff Security Engineer to help design the next generation of autonomous defense for our cloud platform. You’ll lead the security engineering program, shaping frameworks and orchestration layers that enable a fleet of agents to protect data and users with minimal human intervention.

You’ll partner with Product, IT, Security Operations, and GRC to build scalable agentic workflows, evaluate emerging platforms, and mentor teams.

Qualifications

• 6+ years of hands-on security engineering for distributed systems.
• Proven ability to ship complex software in Python or Go at staff level.
• Experience with agentic orchestration frameworks and IAM concepts.
• Knowledge of AI security risks and defenses (OWASP LLM Top 10).

Responsibilities

• Architect the multi-agent orchestration layer coordinating autonomous security tasks.
• Define agent identity, governance, and least-privilege guardrails.
• Lead self-healing strategies to eliminate vulnerability classes at scale.
• Secure the AI infrastructure with sandboxing and prompt-injection controls.
• Drive the long-term agentic roadmap for Procore's security engineering.
• Evaluate emerging agentic platforms and bring them into production at scale.
• Mentor teams and propagate agentic thinking across the org.
• Lead incident response orchestration for high-stakes security events.

Skills

Distributed software development

Python

Go

Tools

LangGraph

CrewAI

AutoGPT

AWS

Kubernetes

Job description

We’re looking for a Staff Security Engineer to join Procore’s Security Engineering team as a foundational technical leader. In this role, you won’t just be implementing security controls, you will be designing the next generation of autonomous defense. Your mission is to move Procore beyond static automation toward a self-governing, agentic security posture. You will design the high‑level frameworks and orchestration layers that allow a fleet of security agents to protect our platform, data, and users with minimal human intervention

Asa Staff Security Engineer, you are a force multiplier. You will partner with Product & Technology, IT, Security Operations, and GRC to execute the long‑term strategy for agentic security engineering. You will use your deep expertise in distributed systems and LLM orchestration to build robust, scalable agentic workflows that solve entire classes of security vulnerabilities permanently. This is a high‑impact leadership opportunity to define the future of security engineering for a global SaaS leader - Apply today.

What you’ll do

At Procore, AI isn’t a specialized tool, it's a core competency. We expect every team member to be AI‑literate, leveraging generative tools and agentic workflows to move faster and work smarter. You won’t just use AI; you’ll be building the agentic future of construction.

• Architect the Agentic Fabric: Design and implement the multi-agent orchestration layer (using LangGraph, Semantic Kernel, or custom MAS frameworks) that coordinates autonomous security tasks across the enterprise.
• Define Agentic Identity & Governance: Solve the complex challenge of Agent Identity—designing how autonomous agents authenticate (IAM/OIDC), manage secrets, and operate within least‑privilege guardrails.
• Autonomous Vulnerability Eradication: Lead the strategy for self‑healing systems, building agents that don't just find bugs, but autonomously architect, test, and deploy platform‑wide refactors to eliminate vulnerability classes.
• Secure the AI Infrastructure: Architect the enterprise‑wide paved path for secure agent deployment, including high‑assurance sandboxing, real‑time prompt‑injection firewalls, and RAG data‑leakage prevention.
• Drive the Agentic Roadmap: Design the multi-year technical strategy for shifting Procore from manual security engineering to a human‑in‑the‑loop autonomous model.
• Lead Complex Evaluations: Spearhead the evaluation of emerging agentic security platforms and LLM‑native security tools, moving them from proof‑of‑concept to production at scale.
• Advanced Threat Modeling: Build agents capable of performing dynamic, recursive threat modeling of microservices and complex cloud architectures.
• Strategic Mentorship: Scale agentic thinking across the entire Security and Engineering organization, setting the standard for how Procore builds and secures autonomous systems.
• Incident Response Orchestration: Build the autonomous control orchestrator agents capable of performing initial triage, containment, and evidence preservation during high‑stakes security events.

What we’re looking for

• Development: 6+ years of experience in hands‑on technical security, with a proven track record of shipping complex, distributed software in Python or Go at a Staff level.
• Agentic Orchestration Mastery: Deep, production‑level experience with agent frameworks (LangGraph, CrewAI, AutoGPT). You understand the architecture of stateful, multi‑turn agentic loops and autonomous tool‑calling.
• LLM Security Pioneer: Authoritative knowledge of AI security risks (OWASP LLM Top 10) and experience building defensive layers like Semantic Firewalls, LLM Guardrails, and EWS (Early Warning Systems) for agents.
• Distributed Systems Expertise: Deep understanding of cloud‑native architecture (AWS/K8s) specifically as it relates to providing secure, scalable execution environments for autonomous processes.
• Agentic Identity & Access: Proven experience building or extending IAM/IGA systems to handle non‑human, autonomous entities (service mesh, workload identity, agent‑specific tokens).
• Strategic Influence: The ability to influence engineering leadership and drive the cultural shift from \"scanning for bugs\" to \"building autonomous fixers.
• Agentic SDLC Vision: Experience embedding AI agents into the CI/CD pipeline to automate complex reasoning tasks, moving beyond simple static/dynamic analysis.
• Analytical Rigor: A systems‑thinking approach to security, with the ability to treat prompt engineering as a rigorous logic and control‑flow discipline.
• Communication: Exceptional ability to translate the abstract world of agentic security into concrete, actionable roadmaps for both executives and junior engineers.

About Us

Procore Technologies is building the software that builds the world. We provide cloud‑based construction management software that helps clients more efficiently build skyscrapers, hospitals, retail centers, airports, housing complexes, and more. At Procore, we have worked hard to create and maintain a culture where you can own your work and are encouraged and given resources to try new ideas. Check us out on Glassdoor to see what others are saying about working at Procore.

We are an equal‑opportunity employer and welcome builders of all backgrounds. We thrive in a dynamic and inclusive environment. We do not tolerate discrimination against candidates or employees on the basis of gender, sex, national origin, civil status, family status, sexual orientation, religion, age, disability, race, traveler community, status as a protected veteran or any other classification protected by law.

Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact our benefits team here to discuss reasonable accommodations.

At Procore, we believe in supporting our employees to help them thrive both personally and professionally. We offer a comprehensive range of benefits and perks for full‑time employees, including generous paid time off and leave options, healthcare coverage, and career development programs. Discover more about our offerings and how we empower our global team to succeed at https://careers.procore.com/#benefits