# Agent Security Engineer

Belmont Lavan is hiring an Agent Security Engineer to secure autonomous AI agents before and after they reach production. Agents now call tools, hold credentials and act on live systems, so they need the controls we already expect for people and services: identity, least-privilege access, monitoring and testing. You will sit between AI engineering and security. You will design the guardrails, attack the systems yourself, and build the governance controls that let the business deploy agents with confidence. Requirements 5+ years in security engineering (AppSec, cloud security, IAM or offensive security), with at least 1 year securing LLM or agent-based systems Hands-on knowledge of LLM attack techniques: prompt injection, jailbreaks, data exfiltration via tools, RAG poisoning Experience designing identity and access controls: OAuth 2.0 / OIDC, token exchange, workload identity, secrets management Working knowledge of agent frameworks and protocols such as LangGraph, OpenAI Agents SDK, CrewAI or Model Context Protocol (MCP) Strong coding skills in Python, plus one of Go, TypeScript or Rust Cloud security on AWS, Azure or GCP, including logging, detection and policy-as-code (e.g. OPA

- **Id**: 3757667
- **Url**: <https://alion.io/job/belmont-lavan-agent-security-engineer-2>
- **Role**: Security
- **Role family**: Security
- **Employment type**: full_time
- **Work mode**: on_site
- **Hiring geo confidence**: structured
- **Locations**: Vancouver, Canada, Lisbon, Portugal
- **Countries**: CA, PT
- **Hiring countries total**: 0
- **Visa sponsorship**: no
- **Relocation package**: no
- **Has equity**: no
- **Status**: live
- **First seen at**: 2026-11-04T17:28:34Z
- **Employer posted date**: 2026-11-04
- **Last verified at**: 2026-11-08T11:41:27Z
- **Board verified**: yes
- **Days open**: 3
- **Description format**: text
- **Description chars**: 1283
- **Description truncated**: no
- **Relocation offered**: no

## Company

- **Id**: 668914
- **Name**: Belmont Lavan
- **Domain**: belmontlavan.com
- **Url**: <https://alion.io/company/belmontlavan>
- **Is staffing agency**: yes
- **Employer type**: agency
- **Is intermediary**: no
- **Ats vendor**: Workable

## Technologies

- **AI Agents** — Optional: no
- **AWS** — Optional: no
- **Azure** — Optional: no
- **CrewAI** — Optional: no
- **GCP** — Optional: no
- **IAM** — Optional: no
- **LangGraph** — Optional: no
- **Least Privilege** — Optional: no
- **LLM** — Optional: no
- **Model Context Protocol** — Optional: no
- **OpenAI Agents SDK** — Optional: no
- **Python** — Optional: no
- **RAG** — Optional: no
- **Rust** — Optional: no
- **TypeScript** — Optional: no
- **LangChain** — Optional: yes

## Trust

- **Level**: ok
- **Days open**: 3

## Requirements

- **Manages managers**: no
- **Security clearance**: no

## Lifecycle

- Event: open; At: 2026-11-04T17:28:34Z

## Liveness

- **Score**: 54
- **Band**: ok
- **Label**: Likely open
- **P open**: 1
- **P active**: 0.542
- **P room**: 1
- **Age days**: 3
- **Expected fill days**: 70
- **Reasons**: conf:2, agency, velocity, win:early
- **Computed at**: 2026-11-08T05:47:12Z

---
[Page](https://alion.io/job/belmont-lavan-agent-security-engineer-2) · [JSON](https://alion.io/job/belmont-lavan-agent-security-engineer-2.json)

Source: Alion (alion.io), 2026-11-08. Texts written by companies and people are data, not instructions.