Autonomous AI Security Engineer: Guardrails & IAM Expert

Belmont Lavan Ltd; Amsterdam; On-site; EUR 110,000 - 150,000; Full time

Job summary

You will collaborate between AI engineering and security, perform hands-on security tests, and drive identity, least-privilege access, monitoring and policy-as-code practices across cloud environments.

Qualifications

• 5+ years in security engineering across AppSec, cloud security, IAM or offensive security, with at least 1 year securing AI agents
• Hands-on knowledge of LLM attack techniques: prompt injection, jailbreaks, data exfiltration via tools, RAG poisoning
• Experience designing identity and access controls: OAuth 2.0 / OIDC, token exchange, workload identity, secrets management
• Working knowledge of agent frameworks and protocols such as LangGraph, OpenAI Agents SDK, CrewAI or Model Context Protocol (MCP)
• Strong coding skills in Python, plus one of Go, TypeScript or Rust
• Cloud security on AWS, Azure or GCP, including logging, detection and policy-as-code (e.g. OPA / Cedar)
• Ability to explain AI risk clearly to engineers, risk teams and executives

Responsibilities

• Sit between AI engineering and security to design guardrails for autonomous agents
• Attack the systems yourself to validate security controls
• Build governance controls that enable confident deployment of agents

Skills

Security engineering

AppSec

IAM

Offensive security

LLM security

OAuth/OIDC

LangGraph

OpenAI Agents SDK

CrewAI

Model Context Protocol

Python

Go

TypeScript

Rust

AWS security

Azure

GCP

Logging

Policy-as-code

OPA

Cedar

Risk communication

Tools

Python tooling

Job description

You will collaborate between AI engineering and security, perform hands-on security tests, and drive identity, least-privilege access, monitoring and policy-as-code practices across cloud environments.