{"id":4077037,"url":"https://alion.io/job/brahma-ai-security-engineer-for-agentic-ai","title":"Security Engineer for Agentic AI","company":{"id":1887627,"name":"BRAHMA AI","domain":"brahma.io","url":"https://alion.io/company/brahma-io","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jobvite","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"IAM","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"Promptfoo","optional":true}],"status":"live","first_seen_at":"2026-11-11T15:45:46Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T15:45:46Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Description\nBrahma AI operates at the intersection of enterprise Media Asset Management (MAM) and cutting-edge generative media. We build and scale industry-leading generative AI models, including hyper-realistic digital humans (ATMAN) and multilingual voice synthesis (VAANI), for world-class enterprise clients in entertainment, sports, healthcare, and retail.\nRole Overview\nWe are looking for a Security Engineer for Agentic AI to make the agents, tools, and models Brahma teams rely on safe by default. You will own the security of our sovereign agent gateway for model routing, MCP tool hosting, and multi-agent orchestration: how agents authenticate, what they can reach, how they handle untrusted input, and how every action is logged.\nThis is an application and AI security role, not a cloud security role. Our Cloud Security Engineer owns GCP, Kubernetes, network, and infrastructure-as-code posture. You own the controls above it, in agents, tools, models, and their data flows, and you share secrets, sandbox runtimes, and security telemetry with them. You work as part of a team led by the Lead Engineer for Agentic AI, together with the AI Architect , Senior Engineers, ML Engineers and Product Management. You also work closely with Security and compliance and other teams using or contributing to Agentic AI. You own and build the security controls; the Architect designs security into the architecture, and Senior Engineers build to your standards and fix findings in their components.\nThis is an individual contributor role: building controls, tooling, and tests, and reviewing code and designs. You also share security knowledge within the team and with other Brahma teams, so safe practices spread beyond the people who build the controls. You follow emerging agent and AI threats, test new attack classes in bounded experiments, and bring proven defences into production. Once they are live, you own them: monitoring, detection, and response in an enterprise environment. We assemble our setup from open protocols, open-source components, and our own services, so you build what is missing and maintain what you run. There is no formal on-call rotation yet, but one may be introduced.\nKey Responsibilities\n1. Threat Modelling & Secure Design\nAgentic Threat Modelling: Threat model agents, tools, MCP servers, and multi-agent workflows using the OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and MITRE ATLAS, and run a lightweight pre-launch review gate.\nSecure-by-Default Reviews: Review agentic code and designs, publish secure defaults, and make risk trade-offs explicit and owned.\nSecurity Knowledge Sharing: Teach secure agent practices within the team and to other Brahma teams through guides, threat-model walkthroughs, demos and office hours.\n2. Identity, Isolation & Guardrails\nAgent & Tool Identity: Design authentication and authorisation for agents and tools with OAuth 2.0/OIDC, token exchange, and scoped, short-lived credentials, with per-tool least privilege, fail-closed MCP authorisation, and secrets kept out of agent runtimes.\nSandboxed Execution: Harden the containers and sandboxes where coding agents and tool calls run, with filesystem isolation, egress control, and human approval for irreversible actions.\nGuardrails & Policy Enforcement: Build gateway defences against direct and indirect prompt injection, tool abuse, excessive agency, and data exfiltration: input and output filtering, PII/DLP, and policy-as-code, tuned so they do not stall developers.\n3. Adversarial Testing & Supply Chain\n AI Red-Teaming: Build an automated adversarial test suite (injection, tool misuse, exfiltration, goal drift) that runs in CI and on a schedule, so we can show controls work, not only that they exist.\nSupply-Chain Security: Govern which MCP servers, skills, plugins, models, and dependencies we adopt, through review, allow-listing, signing, SBOMs, and scanning.\n4. Detection, Response & Compliance\nAudit Logging & Detection: Make every model, tool, and agent call traceable to a person and an agent, and feed guardrail events and anomalies into security monitoring and alerting.\nProduction Security Ownership: Own the security controls once they are live: monitor their effectiveness, tune guardrails from production data, and keep them patched and current as models, tools and standards change.\nIncident Response & Compliance: Own the playbook for agent-related incidents and lead the technical response. Map controls to ISO 27001, ISO/IEC 42001, SOC 2, GDPR, and TPN, and keep evidence audit-ready.\nMust Haves\nSecurity Engineering Background: 5+ years in security engineering with a strong application or product security component, and fluent Python.\nBuild, Not Only Audit: Track record of shipping security tooling, controls, and automated tests as production code.\nLLM & Agent Security: Hands-on experience securing LLM applications or agents against prompt injection and unsafe tool use.\nIdentity & Authorisation: Deep knowledge of OAuth 2.0, OIDC, token exchange, workload identity, and least-privilege design.\nThreat Modelling: Experience leading structured threat modelling and turning findings into prioritised engineering work.\nSecure SDLC & DevSecOps: Experience embedding security scanning and checks into CI/CD, and securing containerised workloads.\nRisk Communication: Ability to explain risk and trade-offs clearly to engineers and leadership, and to document decisions.\nKnowledge Sharing: Track record of teaching and documenting security practices for colleagues and other teams.\nNice to Have\nAI Red-Teaming Tools: Experience with garak, PyRIT, promptfoo, or similar.\nPolicy Engines: Practical use of OPA/Rego, Cedar, or similar.\nSandboxing Technology: Familiarity with gVisor, Firecracker, seccomp, or Landlock.\nAgent Infrastructure: Experience building or securing MCP servers, LLM gateways, or guardrail services.\nGCP: Working knowledge of IAM, Workload Identity, Secret Manager, and Cloud Logging.\nAI Governance & Media Security: Exposure to ISO/IEC 42001, NIST AI RMF, or MPA/TPN content security.\nCertifications: OSCP, GIAC, CSSLP, or equivalent.\nAbout BRAHMA AI:\nBRAHMA AI is the next generation of enterprise media technology formed through the integration of Prime Focus Technologies and Metaphysic. By combining CLEAR®, CLEAR® AI, ATMAN, and VAANI into one ecosystem, BRAHMA AI enables enterprises to manage, create, and distribute content with intelligence, security, and efficiency. \nProven, scalable, and enterprise-tested, BRAHMA AI is helping global organizations accelerate growth, efficiency, and creative impact in the AI-powered era.","description_format":"text","description_chars":6626,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Streaming & OTT Platforms","Multimodal AI"],"lifecycle":[{"event":"open","at":"2026-11-11T15:45:46Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":32,"reasons":["conf:0","win:early"],"computed_at":"2026-11-11T16:27:41Z"},"pay":null,"html_url":"https://alion.io/job/brahma-ai-security-engineer-for-agentic-ai","json_url":"https://alion.io/job/brahma-ai-security-engineer-for-agentic-ai.json","meta":{"generated_at":"2026-11-11T16:27:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31084,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1887627},"rest":"https://alion.io/mcp/rest/get_company?id=1887627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrahma-ai-security-engineer-for-agentic-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrahma-ai-security-engineer-for-agentic-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrahma-ai-security-engineer-for-agentic-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brahma-ai-security-engineer-for-agentic-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrahma-ai-security-engineer-for-agentic-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4077037}},{"tool":"search_jobs","arguments":{"company":"brahma.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4077037},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}