Senior Runtime Security Engineer for AI Agents

Xage Security; Palo Alto (CA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Equity

Job summary

Xage Security, headquartered in Palo Alto, CA, seeks a Senior Runtime Security & Systems Engineer to build the runtime security layer powering Agent Sentry, the enforcement plane of our Zero Trust AI Gateway platform.

You will design OS-level interception, runtime monitoring, sandboxing, identity controls, and tamper-resistant audit infrastructure to secure AI agents across Linux, macOS, and Windows environments.

Qualifications

• 3-5+ years building production security, systems, or infrastructure software.
• Strong programming skills in Go or C/C++ for high-performance security-critical systems.
• Experience with OS internals, runtime security, kernel instrumentation, security telemetry, sandboxing, or container isolation.
• Strong understanding of host security, privilege escalation, runtime exploitation, and endpoint threats.
• Experience with eBPF, Linux kernel development, Windows Kernel, or macOS security frameworks.

Responsibilities

• Build runtime monitoring across Linux, macOS, and Windows using eBPF, Endpoint Security Framework, ETW, and OS-level APIs.
• Capture and analyze process execution, filesystem activity, network events, and agent behaviors.
• Develop secure agent isolation using containers, OS-native sandboxes, and lightweight virtualization (containerd, runc, Firecracker, Wasm).
• Design runtime controls to prevent unauthorized agent actions and reduce security risks.
• Build agent identity infrastructure supporting registration, authentication, cryptographic attestation, short-lived credentials, and automated credential rotation.
• Develop lifecycle governance for agent onboarding, authorization, monitoring, and decommissioning.
• Integrate runtime telemetry with policy engines to enable real-time access decisions, inline enforcement, and automated containment.

Skills

Go

C/C++

OS internals

Runtime security

Tools

eBPF

Kernel instrumentation

Security telemetry

Container isolation

Job description

Xage Security, headquartered in Palo Alto, CA, seeks a Senior Runtime Security & Systems Engineer to build the runtime security layer powering Agent Sentry, the enforcement plane of our Zero Trust AI Gateway platform.

You will design OS-level interception, runtime monitoring, sandboxing, identity controls, and tamper-resistant audit infrastructure to secure AI agents across Linux, macOS, and Windows environments.