Senior AI Security Engineer: Embedded, Secure-by-Design

JLL; Seattle (WA); On-site; USD 200,000 - 225,000; Full time

Benefits offered by this job

401(k) plan with company matching

Comprehensive Medical, Dental & Vision

Paid parental leave

Paid Time Off

Daily Pay

Job summary

JLL is seeking a Senior Security Engineer, AI Enablement to join the Falcon team and own security architecture for agents, MCP integrations, and identity end-to-end. You will collaborate with Falcon's engineers and the Head of AI Security to embed security by design in AI-enabled features.

You will write and review production code, define secure patterns for prompt handling and data flow, and ensure least-privilege credential design for all components.

Qualifications

• 6+ years of security engineering within a software product/engineering team.
• Strong software engineering skills to read, write, and review production code.
• Hands-on experience with agentic AI architectures and MCP/tool integrations.
• Deep knowledge of OAuth/OIDC, service-to-service authentication, and least-privilege credentials.

Responsibilities

• Sit inside the Falcon team as security's full-time technical representative.
• Translate security requirements into actionable product decisions with the team.
• Own the security architecture for Falcon's agents, MCP servers, and tool integrations.

Skills

Security engineering

Production code

Agentic AI security

OAuth/OIDC

Least-privilege design

Cross-functional communication

Embedded security

Education

Bachelor's degree in CS/Engineering

Tools

Claude Agent SDK

MCP servers

SPIFFE/SPIRE

Job description

JLL is seeking a Senior Security Engineer, AI Enablement to join the Falcon team and own security architecture for agents, MCP integrations, and identity end-to-end. You will collaborate with Falcon's engineers and the Head of AI Security to embed security by design in AI-enabled features.

You will write and review production code, define secure patterns for prompt handling and data flow, and ensure least-privilege credential design for all components.