Agentic AI Security Engineer

Howard Hughes Medical Institute (HHMI); Ashburn, Northern (VA, KY); Hybrid; USD 149,000 - 186,000; Full time

Benefits offered by this job

Health benefits

Job summary

HHMI's Janelia Research Campus seeks an Agentic AI Security Engineer to design and operate the safety stack for agentic AI systems. You will implement sandboxing, guardrails, and real-time observability to ensure secure AI agent behavior and auditable sessions.

The role emphasizes hands-on security engineering, integration with OpenShift/Kubernetes environments, and collaboration across biology, ML, and tooling teams.

Qualifications

• Minimum 5 years in security, systems/SRE, or ML systems engineering.
• Hands-on experience with LLM agents and sandbox/container-security.
• Experience with Linux and Kubernetes/OpenShift isolation and governance.

Responsibilities

• Research, develop, deploy, operate, and analyze the safety stack for agentic AI at Janelia.
• Implement sandboxing, guardrails, and observability across agent sessions and tool calls.
• Collaborate on architecture decisions and publish or open-source work where appropriate.

Skills

LLM agents

Sandboxing

Kubernetes/OpenShift

Agent architectures

Open-source contributions

Security/ML systems (5+ yrs)

Tools

MCP protocol

Job description

## Agentic AI Security EngineerApply: Janelia Research Campus: Full time: Posted Yesterday: R-4631Primary Work Address: 19700 Helix Drive, Ashburn, VA, 20147## Current HHMI Employees, click here to apply via your Workday account.The Howard Hughes Medical Institute’s Janelia Research Campus is a pioneering research center in Ashburn, Virginia, where scientists pursue fundamental questions in the life sciences. Our integrated teams of biologists, computational scientists, and tool-builders innovate research practices and technologies to solve biology’s deepest mysteries. HHMI launched Janelia in 2006, establishing an intellectually enriching environment for scientists to do creative, collaborative, hands-on work. We share our methods, results, and tools with the scientific community.AI@HHMI at Janelia integrates AI agents across the research process. These tools write and execute code, optimize experimental and model parameters, and drive instruments.Letting AI agents act on shared research infrastructure requires serious safety engineering. The relevant failure mode is usually not a malicious attacker but a capable, misdirected tool running with legitimate user permissions at machine speed: hallucinated commands, instructions hijacked by retrieved content, runaway loops, sandbox escapes. We are hiring the engineer who owns this problem. ## **The role**You will research, develop, deploy, operate, and analyze the safety stack for agentic AI at Janelia:* **Sandboxing.** Hardened, reproducible execution environments for agent code (kernel- and VM-level isolation, network egress control) on our OpenShift platform and HPC cluster, validated by adversarial testing.* **Guardrails.** Policy enforcement on agent inputs, outputs, and tool calls; judge models; human approval gates; independent safeguard services that sessions can be routed through, individually or chained.* **Observability.** Attributable audit logging, full-trace capture, real-time monitoring, and post-incident analysis of agent sessions.You will join early enough to make the foundational architecture decisions, and you will operate what you design. We expect and support open-sourcing and publishing this work. ## **The environment**A large NVIDIA GPU cluster (B300/H200/H100 class) running self-hosted open-weight models and frontier commercial models; collaborations with industry (Anthropic and Google); scientists across biology, physics, and ML as your users; the long-term stability of a philanthropy-funded research institute. ## **What we look for*** Hands-on experience operating LLM agents and dealing with their failures, or deep sandbox/container-security expertise with clear ability to move into the agentic domain.* Linux and Kubernetes/OpenShift isolation depth, including a precise understanding of the difference between containerization and sandboxing.* Working knowledge of agent architectures: tool-calling protocols (e.g., MCP), approval gates, judge models, guardrail frameworks, and the limits of each.* Evidence over certifications: open-source contributions, publications or technical writing, disclosed findings, or production systems you can discuss in depth.* Minimum 5 years in security, systems/SRE, or ML systems engineering. **To apply:** include a link to something you have built, broken, or written. **Physical Requirements**Remaining in a normal seated or standing position for extended periods of time; reaching and grasping by extending hand(s) or arm(s); dexterity to manipulate objects with fingers, for example using a keyboard; communication skills using the spoken word; ability to see and hear within normal parameters; ability to move about workspace. The position requires mobility, including the ability to move materials weighing up to several pounds (such as a laptop computer or tablet).Persons with disabilities may be able to perform the essential duties of this position with reasonable accommodation. Requests for reasonable accommodation will be evaluated on an individual basis. **Please Note:**This job description sets forth the job’s principal duties, responsibilities, and requirements; it should not be construed as an exhaustive statement, however. Unless they begin with the word “may,” the Essential Duties and Responsibilities described above are “essential functions” of the job, as defined by the Americans with Disabilities Act. **#LI-BG1****Compensation and Benefits**Our employees are compensated from a total rewards perspective in many ways for their contributions to our mission, including competitive pay, exceptional health benefits, retirement plans, time off, and a range of recognition and wellness programs. Visit our Benefits at HHMI site to learn more.*Hiring Pay Range*$149,084.80 - $186,356.00Pay Type:AnnualThe posted range reflects HHMI’s good faith estimate of the anticipated hiring salary range for this role at the time of posting. Actual hiring compensation is determined by a candidate’s qualifications, experience, and internal equity.