Agent Security Expert

Tencent; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Tencent is seeking an experienced Agent Security Expert in Singapore to lead the architecture and security roadmap for an enterprise AI workloads protection product. You will operate at the intersection of application security, AI safety, and systems engineering to enable safe autonomous agents across digital infrastructure.

You will own end-to-end security design, implement runtime guardrails, and mentor engineers while collaborating with product and threat intelligence teams to address

Qualifications

• 8+ years of hands-on security engineering or related field with a track record of production security components.
• Deep expertise in at least two of: application security, cloud-native security, IAM, or security operations.
• Proficient in Go, Python, Rust, or C++, with experience building high-concurrency security services or detection pipelines.
• Strong working knowledge of the LLM/Agent stack — RAG architectures, function calling, MCP protocol, and related agent frameworks.
• Experience shipping enterprise security products (EDR, CNAPP, AI-SPM or equivalent); familiarity with sandboxing, eBPF, or container isolation is a strong plus.

Responsibilities

• Own the end-to-end technical architecture of our Agent security product, balancing detection coverage, latency, and operational overhead.
• Design and implement runtime guardrails including prompt injection defense, tool-call interception, and credential leak prevention.
• Architect security capabilities for MCP protocol, tool-chain supply-chain security, and defense against tool poisoning.
• Build automated red-teaming pipelines to discover vulnerabilities and harden defenses before production.
• Collaborate with product, engineering, and threat intel teams to translate attack patterns into shipped features and mentor juniors.

Skills

Go

Python

Rust

C++

Security engineering

High-concurrency

LLM/Agent stack

Job description

Business Unit

Cloud & Smart Industries Group (CSIG) is responsible for promoting the company's cloud and industry Internet strategy. CSIG explores the interactions between users and industries to create innovative solutions for smart industries via technological advancements such as cloud, AI, and network security. While driving the digitalization of retail, medical, education, transportation and other industries, CSIG helps companies serve users in smarter ways, building a new ecosystem of intelligent industries that connect users and businesses.

Business Unit

Cloud & Smart Industries Group (CSIG) is responsible for promoting the company's cloud and industry Internet strategy. CSIG explores the interactions between users and industries to create innovative solutions for smart industries via technological advancements such as cloud, AI, and network security. While driving the digitalization of retail, medical, education, transportation and other industries, CSIG helps companies serve users in smarter ways, building a new ecosystem of intelligent industries that connect users and businesses.

What The Role Entails

We are building the next-generation Agent security product to protect enterprise AI workloads at scale. As our Agent Security Expert, you will define the technical architecture for real-time agent defense and lead the product's security roadmap in a fast-emerging global market. You will work at the intersection of application security, AI safety, and systems engineering, shaping how enterprises safely deploy autonomous agents across their digital infrastructure.

• Own the end-to-end technical architecture of our Agent security product, making principled trade-offs across detection coverage, latency, and operational overhead.
• Design and implement runtime guardrails — including prompt injection defense, unauthorized tool-call interception, behavioral drift detection, and real-time credential leak prevention.
• Architect MCP and tool-chain supply-chain security capabilities against tool poisoning, cross-origin privilege escalation, and transitive trust abuse.
• Build an automated agent red-teaming pipeline to continuously discover vulnerabilities, generate adversarial test cases, and harden defenses before production deployment.
• Partner with product, engineering, and threat intelligence teams to translate emerging attack patterns into shipped security features, and mentor junior engineers on security-first design.

Who We Look For

• 8+ years of hands-on experience in security engineering, systems engineering, or a closely related field, with a track record of shipping production security components.
• Deep expertise in at least two of: application security, cloud-native security, identity and access management (IAM), or offensive/defensive security operations.
• Proficient in at least two of Go, Python, Rust, or C++, with experience building high-concurrency security services or detection pipelines.
• Strong working knowledge of the LLM/Agent stack — RAG architectures, function calling, MCP protocol, and mainstream agent frameworks — and the unique attack surfaces they introduce.
• Experience researching or shipping enterprise security products (EDR, CNAPP, AI-SPM, or equivalent); familiarity with sandboxing, eBPF, or container/virtualization isolation is a strong plus.

Equal Employment Opportunity at Tencent

As an equal opportunity employer, we firmly believe that diverse voices fuel our innovation and allow us to better serve our users and the community. We foster an environment where every employee of Tencent feels supported and inspired to achieve individual and common goals.