Join Emergent, a leader in autonomous coding agents that are revolutionizing software development. We build systems that generate, test, and deploy production applications directly from plain-language intent. Our platform powers millions of real applications globally and has achieved significant commercial success, backed by prominent investors. We are at the forefront of solving complex challenges in AI-driven software creation, focusing on correctness, reliability, security, and scale.

As a Senior Software Engineer specializing in Application Security, you will be instrumental in securing our advanced AI-driven execution environment. Your responsibilities will include defining and implementing security patterns for AI-generated applications, enforcing guardrails across authentication, data access, APIs, and business logic, and building frameworks for secure-by-default app generation.

You will design systems that prevent insecure code from being produced, developing validation layers for generated code, and detecting prompt injection and adversarial input patterns. Additionally, you will own application threat modeling, identify vulnerabilities in dynamic app creation flows, analyze risks in multi-tenant environments, and build reusable threat models. You'll also develop developer-facing security primitives such as auth systems, permission frameworks, secure SDKs, API gateways, and input/output validation layers for LLM-driven flows.

Your role will also involve red teaming AI-generated applications, identifying systemic weaknesses, and feeding these learnings back into our generation systems to continuously improve security posture.

We are seeking experienced builders who thrive on ownership, speed, and making a global impact. A strong foundation in Application Security with 5-10+ years of experience is essential. Proficiency in coding, particularly with Python, JavaScript/TypeScript, and backend systems, is required.

A deep understanding of key security concepts including the OWASP Top 10, robust authentication and session management, API security best practices, and mitigation strategies for injection and sandbox escape vectors is crucial. Prior experience collaborating closely with product and engineering teams is also expected.

Candidates who think systemically, aim to prevent insecure code from inception, and possess experience with AI/LLM systems, prompt injection, output validation, and secure code generation will stand out. This is a unique opportunity to build security for AI systems that build software at an unprecedented scale.