{"id":581585,"url":"https://alion.io/job/causa-prima-platform-security-engineer","title":"Agentic Security Engineer","company":{"id":456176,"name":"Causa Prima","domain":"causaprima.ai","url":"https://alion.io/company/causa-prima","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain","Munich, Germany"],"countries":["ES","DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":121000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Apache Kafka","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"LLM Guardrails","optional":true},{"name":"Redpanda","optional":true}],"status":"live","first_seen_at":"2026-06-29T15:48:19Z","employer_posted_date":"2026-06-29","last_verified_at":"2026-11-03T16:15:29Z","board_verified":true,"closed_at":null,"days_open":127,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":126},"description":"In this role, you will design and build the System Integrity Layer, establishing the foundational platform primitives that guarantee every agent action is isolated and attributable, every execution is traceable, every state transition is verifiable, and every software release satisfies strict security constraints by construction. This is a hands-on backend security engineering role where security, threat resilience, and compliance are natural outcomes of brilliant system architecture, not separate, bureaucratic processes. We are looking for a builder, not a governance operator-someone who treats trust guarantees as core system properties designed directly into the database and application layers from day one. Architecture or technical-leadership experience is fine, even welcome, as long as it comes with real hands-on depth you can point to-specific systems you designed and built-rather than process, documentation, or audit-standardization work alone.\nWhat you'll do:\nSystem Integrity Layer & Threat Modeling - Design the core execution model that governs how autonomous agents run, interact, and modify system state.\n\nProactive Threat Modeling - Conduct continuous, code-level threat modeling across our distributed networks to identify structural vectors, memory leakage, prompt manipulation, and authorization bypasses before a single line hits staging.\n\nAuditability as a Native Property - Build append-only, tamper-resistant event systems that make every action reconstructable without relying on external logging frameworks or reactive \"audit tooling.\"\n\nIsolation, Trust Boundaries, & Adversarial Testing - Engineer strict execution and data isolation layers between agents, users, and workflows in a multi-tenant infrastructure.\n\nContinuous Offensive Testing - Run active internal pentesting, adversarial chaos testing, and targeted red teaming exercises against our own infrastructure to aggressively expose flaws in isolation barriers and cryptographic verification boundaries.\n\nAgent Execution Guarantees - Ensure all automated, agentic accounting processes are strictly attributable, deterministic where required, verifiable in hindsight, and unalterably constrained by explicit system rules.\n\nRobust Engineering & Pipeline Security - Architect and refine our internal software delivery pipeline to guarantee absolute integrity from code commit to production deployment.\n\nBuild deterministic verification mechanisms into the CI/CD pipeline, ensuring that all third-party dependencies, agent libraries, and compiled services are cryptographically signed, scanned, and secure by default.\n\nCompliance Through Architecture - Translate complex regulatory and audit requirements directly into low-level system constraints, completely eliminating the need for reactive operational processes or manual review workflows.\n\nWhat we're looking for\nExperience: 5+ years designing production backend platforms and distributed systems design.\n\nDatabase experience: Deep schema design, RLS, and event-sourcing database expertise.\n\nSecurity Architecture: Practical application-level security, encryption models, key management, and auth patterns.\n\nAdversarial Mindset: You naturally think like an attacker to uncover race conditions, logic flaws, and vulnerabilities.\n\nPolicy-as-Code: Hands-on experience with Cerbos, OPA, Cedar, or similar.\n\nDomain knowledge: You've owned real breadth of the security stack, not one narrow slice of it. You understand what securing mission-critical enterprise software at large scale demands. Regulated industries (fintech, banking, insurance) are a plus, but end-to-end ownership counts for more than time spent inside a large org.\n\nNice to have:\nCryptographic primitives\n\nEvent streaming (Kafka/Redpanda)\n\nKubernetes and cloud-native architecture knowledge\n\nLLM/agentic system security exposure (prompt injection defense, guardrails, agent threat modeling)-relevant to our product surface, but a plus on top of the backend and security fundamentals above, not a substitute for them.","description_format":"text","description_chars":4026,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-09T22:59:00Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.345,"p_room":0.28,"age_days":126,"expected_fill_days":36,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/causa-prima-platform-security-engineer","json_url":"https://alion.io/job/causa-prima-platform-security-engineer.json","meta":{"generated_at":"2026-11-03T17:53:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24863,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":456176},"rest":"https://alion.io/mcp/rest/get_company?id=456176"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcausa-prima-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcausa-prima-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcausa-prima-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/causa-prima-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcausa-prima-platform-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":581585}},{"tool":"search_jobs","arguments":{"company":"causaprima.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":581585},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}