Product Security Engineer

Xcede; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Xcede is seeking a Product Security Engineer for its well-funded AI infrastructure startup in San Francisco. You will work closely with enterprise security teams to understand the threat landscape of AI agents, map identities, permissions, data access, and attack paths, and translate risks into practical detections and enforcement controls.

As part of the role, you design security policies, build tooling, and integrate telemetry into SIEM, SOC, and incident-response workflows while aligning

Qualifications

• 2–5 years of engineering experience with meaningful hands-on enterprise security exposure.
• Experience across security engineering, detection engineering, cloud security, incident response, security products, or MDR.
• Strong understanding of enterprise security architecture and security operations.
• Experience working with SIEMs, detection pipelines, telemetry, and incident-response workflows.
• Ability to write code and build security tooling rather than operating solely in an advisory capacity.
• Familiarity with enterprise identity, cloud infrastructure, APIs, and modern application architectures.
• Ability to communicate effectively with both security leadership and deeply technical practitioners.
• Interest in emerging security challenges created by AI agents and autonomous systems.

Responsibilities

• Work directly with enterprise security organizations to understand their AI and agent threat landscape.
• Map agent identities, permissions, tools, data access, and potential attack paths.
• Design and implement security policies, detections, and enforcement controls.
• Build capabilities that identify suspicious or unauthorized AI-agent behavior.
• Tune controls around customer-specific risk profiles and security requirements.
• Integrate AI security telemetry and detections into SIEM, SOC, and incident-response workflows.
• Support security reviews, investigations, and incidents involving AI systems.
• Help customers align AI deployments with frameworks such as NIST AI RMF, SOC 2, HIPAA, and internal security policies.
• Partner with CISOs, security architects, detection engineers, SOC teams, and platform engineers.
• Translate recurring security requirements into reusable product functionality.

Skills

Security engineering

Detection engineering

Cloud security

Incident response

SIEM

Telemetry

Security operations

MDR

Threat modeling

Communication with leadership

Tools

APIs

Job description

Well-funded AI Infrastructure Start-up - Product Security Engineer

Thery are building the runtime control plane for the agentic enterprise, giving organizations the visibility, security, and governance needed to deploy AI agents safely at scale. The platform helps enterprises discover and monitor agents, understand their behavior, enforce security policies, and control how they interact with models, applications, data, and employee environments.

We’re looking for a security-focused Product Engineer to help large enterprises safely govern rapidly expanding fleets of AI agents.

You’ll work closely with customer security organizations to understand how agents interact with identities, applications, data, APIs, and infrastructure, identify where meaningful security exposure exists, and translate those risks into practical detections, policies, and enforcement controls.

What You’ll Do

• Work directly with enterprise security organizations to understand their AI and agent threat landscape.
• Map agent identities, permissions, tools, data access, and potential attack paths.
• Design and implement security policies, detections, and enforcement controls.
• Build capabilities that identify suspicious or unauthorized AI-agent behavior.
• Tune controls around customer-specific risk profiles and security requirements.
• Integrate AI security telemetry and detections into SIEM, SOC, and incident-response workflows.
• Support security reviews, investigations, and incidents involving AI systems.
• Help customers align AI deployments with frameworks such as NIST AI RMF, SOC 2, HIPAA, and internal security policies.
• Partner with CISOs, security architects, detection engineers, SOC teams, and platform engineers.
• Translate recurring security requirements into reusable product functionality.

What We’re Looking For

• 2–5 years of engineering experience with meaningful hands-on enterprise security exposure.
• Experience across security engineering, detection engineering, cloud security, incident response, security products, or MDR.
• Strong understanding of enterprise security architecture and security operations.
• Experience working with SIEMs, detection pipelines, telemetry, and incident-response workflows.
• Ability to write code and build security tooling rather than operating solely in an advisory capacity.
• Familiarity with enterprise identity, cloud infrastructure, APIs, and modern application architectures.
• Ability to communicate effectively with both security leadership and deeply technical practitioners.
• Interest in emerging security challenges created by AI agents and autonomous systems.