{"id":3469034,"url":"https://alion.io/job/refold-ai-staff-security-engineer","title":"Staff Security Engineer","company":{"id":3786538,"name":"Refold AI","domain":"refold.ai","url":"https://alion.io/company/refold-2","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":58000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"TypeScript","optional":false},{"name":"HIPAA","optional":true},{"name":"JavaScript","optional":true},{"name":"LLM","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Redis","optional":true}],"status":"live","first_seen_at":"2026-10-29T12:38:15Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-01T12:35:00Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About Refold AI\nRefold AI is the AI integration platform built for agents, made for modern SaaS companies that need to ship enterprise integrations at scale. We're reimagining integrations with AI agents that work like business consultants and integration engineers, building them 10x faster, in hours instead of days. The payoff: integrations stop being a bottleneck that costs you deals and burns margin, and become a growth engine. You win the enterprise deals that hinge on them, onboard faster, and scale without an army of consultants.\nWe've grown rapidly, reaching seven-figure ARR and 30+ paying customers, powering the product and professional services teams at modern SaaS companies, from Incorta, Kantata, and Coupa to Highradius, Naehas, and OvationCXM.\nRefold AI has raised $6.5M from world-class investors including Eniac Ventures (early investors in Airbnb & Uber), Tidal Ventures, and Better Capital.\nAbout this role:\nYou will set the security direction for the whole platform and build much of it with your own hands. This is a hands-on Staff+ role: you write code, review designs, and lead incidents, not only policy.\nYour mandate covers four things:\nProtect customer credentials and data across a multi-tenant platform and every deployment model we ship.\n\nMake AI agents safe to connect to enterprise systems, from prompt injection to tool-permission scope.\n\nHarden how we build and ship, from the monorepo and CI to the images and Helm charts customers run in their own clusters.\n\nTurn security into a sales advantage by owning the technical side of enterprise security reviews and our compliance program.\n\nYou will work across every engineering team, partner with product and go-to-market, and help hire and grow the security function.\nWhat you'll do:\nCloud and infrastructure security\nHarden our GCP and GKE footprint: IAM, workload identity, network policy, egress control and private control planes.\n\nOwn secrets and key management end to end, including rotation, short-lived credentials and KMS-backed encryption.\n\nBuild runtime security for containers and nodes, so a compromised workload is detected and contained fast.\n\nProduct and application security\nThreat-model the integration engine, credential vault, workflow runtime and webhook surface, and drive the fixes.\n\nGuarantee tenant isolation across shared data stores, queues and workflow engines.\n\nDesign safe execution for customer-authored code and custom actions.\n\nRaise the bar on authentication and access: SSO, SCIM, RBAC, API keys and OAuth flows.\n\nAI and agent security\nDefine how AI agents get scoped, auditable access to enterprise systems through our MCP servers and AI gateway.\n\nDefend against prompt injection, tool misuse and data exfiltration through agents.\n\nSoftware supply chain\nSecure the monorepo, CI pipelines and release process: branch protection, signed and provenance-attested images, SBOMs and dependency scanning.\n\nMake the images and Helm charts that customers install in their own clusters trustworthy and easy to verify.\n\nDetection and incident response\nBuild logging, detection and alerting that catch real attacks, with low noise.\n\nLead security incidents end to end: triage, forensics, containment, customer communication and the post-incident fix.\n\nCustomer trust and compliance\nBe the senior technical voice in enterprise security reviews, questionnaires and customer calls.\n\nRun SOC 2 and ISO 27001 as engineering work: automate evidence, own pen-test scoping and drive remediation.\n\nPublish hardening guidance for customers who self-host or run Refold in their own cloud.\n\nLeadership\nBuild paved roads so the secure way is the easy way for every engineer.\n\nMentor engineers, run a security-champions program, and help hire the security team.\n\nWhat we're looking for:\nTypically 8+ years in security or software engineering, including several years as the senior security engineer for a multi-tenant SaaS platform.\n\nDeep cloud and Kubernetes security experience. GCP and GKE preferred; strong AWS or Azure depth is fine.\n\nStrong application security: threat modelling, secure design review, and code review in at least one of TypeScript/Node.js, Python or Go.\n\nFluency with OAuth 2.0, OIDC and SAML, secrets management, key management and encryption design.\n\nYou have led real production security incidents, including forensics and customer communication.\n\nHands-on software supply chain work: CI/CD hardening, artefact signing, SBOMs and dependency risk.\n\nYou write production-quality code and ship tooling, not only recommendations.\n\nYou have represented a company's security in front of enterprise security teams, and won their trust.\n\nYou can turn SOC 2 or ISO 27001 controls into engineering systems instead of spreadsheets.\n\nClear, direct writing. You explain risk to engineers, executives and customers in their own terms.\n\nBonus points:\nSecurity work on LLM and agent systems: OWASP Top 10 for LLM applications, MCP, tool-use permissions.\n\nSandboxing and isolation for untrusted code, such as gVisor, Firecracker or V8 isolates.\n\nShipping software that customers run in their own environments: BYOC, on-prem, air-gapped.\n\nSecuring workflow engines and data stores such as Temporal, MongoDB, Redis and PostgreSQL.\n\nBackground in integration platforms, iPaaS, or enterprise systems like SAP, Workday or Salesforce.\n\nOffensive security experience, published research, CVEs or open-source security tooling.\n\nHIPAA or other regulated-data experience.\n\nYou have built a security team from the first hire.","description_format":"text","description_chars":5523,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","Integration & API Management"],"lifecycle":[{"event":"open","at":"2026-10-29T16:22:12Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":37,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/refold-ai-staff-security-engineer","json_url":"https://alion.io/job/refold-ai-staff-security-engineer.json","meta":{"generated_at":"2026-11-01T13:31:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20729,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3786538},"rest":"https://alion.io/mcp/rest/get_company?id=3786538"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frefold-ai-staff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frefold-ai-staff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frefold-ai-staff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/refold-ai-staff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frefold-ai-staff-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3469034}},{"tool":"search_jobs","arguments":{"company":"refold.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3469034},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}