{"id":4179910,"url":"https://alion.io/job/langchain-application-security-engineer","title":"Application Security Engineer","company":{"id":4855,"name":"LangChain","domain":"langchain.com","url":"https://alion.io/company/langchain","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":89,"open_postings":99,"ghost_share":0.101,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":77,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"Cosign","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"Kubernetes","optional":false},{"name":"LangChain","optional":false},{"name":"LangGraph","optional":false},{"name":"LangSmith","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Monday.com","optional":false},{"name":"Python","optional":false},{"name":"Replit","optional":false},{"name":"SBOM","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"Helm","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kyverno","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-12T16:39:22Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T17:14:35Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Us\nAt LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale.\nWith $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world.\nToday, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater.\nAbout LangChain\nAt LangChain, our mission is to make intelligent agents ubiquitous. We provide the agent engineering platform and open source frameworks developers need to ship reliable agents fast.\nOur open source frameworks, LangChain and LangGraph, see over 90+ million downloads per month and help developers build agents with speed and granular control. LangSmith offers observability, evaluation, and deployment for rapid iteration, enabling teams to transform LLM systems into dependable production experiences.\nLangChain is trusted by millions of developers worldwide and powers AI teams at companies like Replit, Clay, Cloudflare, Harvey, Rippling, Vanta, Workday, and more.\nAbout the role\nYou’ll be the hands-on security lead embedded with core product teams to secure agentic workloads end-to-end, from SDK through LangSmith/Graph services and customer integrations. You’ll define our security roadmap, land immediate hardening wins, and raise the bar on how AI infra is protected in production.\nOwn product & platform security: Design and drive application/infrastructure security controls across LangSmith, LangGraph, and the LangChain SDK ecosystem (Python/TS/Go).\n\nSecure-by-default authN/Z: Evolve SSO/SAML/OIDC/SCIM, token lifecycles, service-to-service auth, and tenant isolation for cloud and self-hosted customers.\n\nShip code & reviews: Land secure designs, write PRs, and introduce lightweight checks (linters, dependency/supply-chain scanning, SBOM/SLSA provenance).\n\nHardening & operations: Network segmentation/Zero Trust, Kubernetes posture, secrets management, key rotation, least-privilege IAM, egress controls.\n\nIncident readiness: Develop IR runbooks, detection rules, and tabletop exercises; lead post-incident forensics and blameless RCAs.\n\nVuln management: Own scanning/triage/patch SLAs; coordinate with engineering to remediate quickly without slowing delivery.\n\nHow to be successful in this role\n5+ years in security engineering with strong software skills (Python or Go; TypeScript a plus).\n\nDepth in cloud/Kubernetes security (e.g., GCP/AWS IAM, workload identity, admission controls, network policies).\n\nHands-on AppSec: code review, threat modeling, secure design, secrets & key management, authn/z patterns, multi-tenant isolation.\n\nExperience building detection & response and running incident management.\n\nFamiliarity with supply-chain security (SBOM, sigstore/cosign, SLSA-style controls) and dependency risk management.\n\nClear, pragmatic communication with engineers and customers.\n\nNice to have\nSecurity for SaaS + self-hosted offerings, including air-gapped deployments.\n\nExposure to SOC 2 / ISO 27001 programs and evidence automation.\n\nExperience with Go services and Infra as Code (Terraform/Helm), plus policy-as-code (OPA/Gatekeeper/Kyverno).\n\nKnowledge of privacy patterns (data minimization, retention, masking, workspace scoping)..\n\nCompensation & Benefits\nWe offer competitive compensation that includes base salary, meaningful equity, and benefits such as health and dental coverage, flexible vacation, a 401(k) plan, and life insurance. Actual compensation will vary based on role, level, and location. For team members in the EU and UK, we provide locally competitive benefits aligned with regional norms and regulations.\n\nAnnual salary range: $175,000-$215,000 USD for Senior Engineers\n\nCompensation Philosophy:\nWe offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks.\nWe are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations.\nBenefits\nBenefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.","description_format":"text","description_chars":5393,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","LLM & Generative AI","AI Development Tools","AI Evaluation & Observability"],"lifecycle":[{"event":"open","at":"2026-11-12T17:14:35Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 17","filings_12m":17,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":172500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":2}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":77,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T20:11:16Z"},"pay":null,"html_url":"https://alion.io/job/langchain-application-security-engineer","json_url":"https://alion.io/job/langchain-application-security-engineer.json","meta":{"generated_at":"2026-11-12T20:11:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":42651,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4855},"rest":"https://alion.io/mcp/rest/get_company?id=4855"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flangchain-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flangchain-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flangchain-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/langchain-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flangchain-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4179910}},{"tool":"search_jobs","arguments":{"company":"langchain.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4179910},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}