Staff Security Engineer — AI Engines & Enterprise Sandbox

Hone; San Francisco (CA); Sur place; USD 150 000 - 210 000; Plein temps

Avantages offerts par ce poste

Health and dental insurance

Maternity and parental support

Relocation support

Résumé du poste

Hone is building AI engines that you hand goals to and that learn from corrections. We’re seeking a security engineer to own the isolation, identity model, and defenses across our engines, ensuring safe integration with customer systems.

You’ll work on long-running agents, per-engine identities, secret handling, and guardrails against prompt injection, with a focus on production readiness, incident response, and scalable security controls.

Qualifications

• 2+ years of security engineering experience, or equivalent depth from research, CTFs, open source or own projects
• Time at a fast-growing startup
• You’ve designed and built security systems from scratch, not just audited them
• You’ve secured production systems under real load and handled real incidents
• Strong fundamentals: cloud security, identity and access, networking, isolation, application security
• You use coding agents every day and still understand every line you ship
• You break and build things for fun because you genuinely care about how systems fail

Responsabilités

• Isolation and network sandboxing for long-running agents: default-deny egress, scoped access, tenant isolation
• Identity and credentials for engines: per-engine service identities, short-lived scoped credentials, and a broker so agents never hold raw secrets
• Defenses against prompt injection, data exfiltration and tool misuse across untrusted inputs
• Permissions and audit: RBAC, approval gates, and a full record of every action an engine takes and why
• Security architecture for single-tenant and customer-VPC deployments
• Internal AI tooling for detection, review and response, including agents that red-team our own engines

Connaissances

Security engineering

Cloud security

Identity and access

Networking

Application security

Troubleshooting

Coding agents experience

Description du poste

Hone is building AI engines that you hand goals to and that learn from corrections. We’re seeking a security engineer to own the isolation, identity model, and defenses across our engines, ensuring safe integration with customer systems.

You’ll work on long-running agents, per-engine identities, secret handling, and guardrails against prompt injection, with a focus on production readiness, incident response, and scalable security controls.