Agent Security Expert

Tencent Cloud; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Tencent Cloud is seeking an Agent Security Expert to define the technical architecture for real-time defense of enterprise AI workloads. You will lead the product's security roadmap at scale, bridging application security, AI safety, and systems engineering across global deployments.

You will own end-to-end architecture, design runtime guardrails, build red-teaming pipelines, and partner with product and engineering teams to ship security features while mentoring junior engineers.

Qualifications

• 8+ years in security or systems engineering with production security components.
• Expertise in at least two areas: app security, cloud security, IAM, or security ops.
• Proficient in at least two of Go, Python, Rust or C++ with high-concurrency services.

Responsibilities

• Own end-to-end architecture of the Agent security product, balancing detection, latency and overhead.
• Design runtime guardrails: prompt injection defense and credential leak prevention.
• Architect security capabilities against tool poisoning and cross-origin risks.
• Build automated red-teaming pipelines to discover and harden defenses.
• Collaborate with product/engineering to ship security features and mentor juniors.

Skills

Security engineering

Systems engineering

Go

Python

Job description

We are building the next-generation Agent security product to protect enterprise AI workloads at scale. As our Agent Security Expert, you will define the technical architecture for real-time agent defense and lead the product's security roadmap in a fast-emerging global market. You will work at the intersection of application security, AI safety, and systems engineering, shaping how enterprises safely deploy autonomous agents across their digital infrastructure.

What You'll Do

• Own the end-to-end technical architecture of our Agent security product, making principled trade-offs across detection coverage, latency, and operational overhead.
• Design and implement runtime guardrails — including prompt injection defense, unauthorized tool-call interception, behavioral drift detection, and real-time credential leak prevention.
• Architect MCP and tool-chain supply-chain security capabilities against tool poisoning, cross-origin privilege escalation, and transitive trust abuse.
• Build an automated agent red-teaming pipeline to continuously discover vulnerabilities, generate adversarial test cases, and harden defenses before production deployment.
• Partner with product, engineering, and threat intelligence teams to translate emerging attack patterns into shipped security features, and mentor junior engineers on security-first design.

What We're Looking For

• 8+ years of hands-on experience in security engineering, systems engineering, or a closely related field, with a track record of shipping production security components.
• Deep expertise in at least two of: application security, cloud-native security, identity and access management (IAM), or offensive/defensive security operations.
• Proficient in at least two of Go, Python, Rust, or C++, with experience building high-concurrency security services or detection pipelines.
• Strong working knowledge of the LLM/Agent stack — RAG architectures, function calling, MCP protocol, and mainstream agent frameworks — and the unique attack surfaces they introduce.
• Experience researching or shipping enterprise security products (EDR, CNAPP, AI-SPM, or equivalent); familiarity with sandboxing, eBPF, or container/virtualization isolation is a strong plus.