Staff Software Security Engineer

Colossus Technologies Group; United States; Remote; USD 220,000 - 270,000; Full time

Benefits offered by this job

Early-stage equity

Remote (US)

Job summary

Colossus Technologies Group is seeking a Staff Software Engineer to embed security into our AI security products. You’ll build customer-facing security capabilities for AI agents, MCP servers, and agentic infrastructure, with a focus on scalable scanners and detection systems.

You should bring extensive experience in security product engineering and the ability to turn complex security problems into production features that customers can rely on.

Qualifications

• 8+ years of professional software engineering and security product engineering.
• Experience building production systems for commercial or customer-facing security tech.
• Background in vulnerability scanners, detection logic, or security automation.
• Ability to design scalable security features for AI-enabled products.

Responsibilities

• Build customer-facing security capabilities for AI agents, MCP servers, skills, plugins, and agentic infrastructure.
• Design and develop scanning engines, detection systems, parsers, rules engines, and analysis pipelines.
• Develop production-ready security features that identify vulnerabilities and risky AI activity.
• Create scalable automated security checks across customer environments.
• Turn security research into production software features and APIs/services powering products.

Skills

Software engineering

Security product engineering

Production systems

Customer-facing security tech

Parsers and detection logic

APIs and backend services

Job description

Staff Software Engineer – Security Products / AI Security

Remote (US) | Mid-$200Ks + Early-Stage Equity

We’re partnering with a fast-growing, early-stage technology company building security products that protect enterprises as they adopt AI agents, MCP servers, skills, plugins, and other emerging AI infrastructure.

We’re looking for a Staff-level Software Engineer who builds security into products.

This person should come from a strong software engineering background and have experience building customer-facing security products, platforms, scanners, detection systems, or developer security tooling that users actually consume.

This is not a traditional cybersecurity operations, SOC, or internal security engineering role. You won’t be implementing someone else’s security platform or primarily protecting an internal corporate environment.

You’ll be building the security product itself.

What You’ll Build

• Build customer-facing security capabilities for AI agents, MCP servers, skills, plugins, and agentic infrastructure
• Design and develop scanning engines, detection systems, parsers, rule engines, and analysis pipelines
• Build technology that identifies vulnerabilities, risky behaviors, misconfigurations, and unauthorized AI activity
• Develop automated security checks that can operate at scale across customer environments
• Turn security research and emerging attack techniques into production software features
• Build APIs, services, and backend systems that power security products
• Work across application security, API security, software supply chain, endpoint/asset discovery, and emerging AI/LLM threats
• Own features from architecture and development through testing, deployment, and production
• Help define how security products need to evolve as AI agents become more deeply integrated into enterprise environments

What We’re Looking For

• 8+ years of professional software engineering / security product engineering experience
• Strong software engineering fundamentals and experience building production systems
• Experience building commercial or customer-facing security technology
• Background building security products such as:
• Vulnerability scanners
• Security analysis platforms
• SAST / DAST / SCA products
• EDR / XDR technology
• API security products
• Security automation platforms
• Asset discovery or attack-surface technology
• Experience designing parsers, rules engines, detection logic, analysis pipelines, or scanning infrastructure
• Strong understanding of application and API security
• Ability to take an ambiguous technical/security problem and turn it into a scalable production product