# AI Agent Security Architect

**Company**: Replit
**Location**: Foster City, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $230 – $350 • Offers Commission
**Category**: Engineering
**Industry**: Technology
**Wikidata**: https://www.wikidata.org/wiki/Q60768699

**Apply**: https://jobs.ashbyhq.com/replit/df7b6d30-9da1-4ace-8121-17c2aa55aa6f?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_5a8bfd56-3f5

## Description

Replit is seeking an AI Agent Security Architect to serve as the primary technical authority for its autonomous and AI agent security blueprint. The successful candidate will design, implement, and maintain runtime defense systems, guardrail frameworks, and sandboxing architectures for AI agents executing code, invoking tools, and reasoning across the platform.

**Responsibilities:**

- Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination.

- Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections.

- Design secure, short-lived, micro-isolated environments for agents to dynamically execute code, run shell commands, and interact with host operating systems safely.

- Conduct specialized threat modeling against non-deterministic systems and lead automated and manual AI red-teaming initiatives.

- Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users.

- Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories.

- Maintain the AI Security Source of Truth, defining, documenting, and maintaining authoritative secure design patterns and SDKs for engineering teams.

- Identify, quantify, and document non-deterministic and agentic security risks, ensuring they are accurately represented in the Cybersecurity Risk Register.

- Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly.

- Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation.

**Requirements:**

- 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated to AI/ML security, LLM application security, or securing agentic frameworks.

- Deep understanding of agentic architectures and protocols (e.g., Model Context Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies).

- Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination.

- Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS.

- Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails.

- Experience authoring, maintaining, and evangelizing technical security architecture documentation.

- Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders.

- Proven track record of contributing to an enterprise Cybersecurity Risk Register.

**Benefits:**

- Competitive Salary & Equity

- 401(k) Program with a 4% match (US Only)

- Health, Dental, Vision and Life Insurance

- Short Term and Long Term Disability

- Paid Parental, Medical, Caregiver Leave

- Flexible Time Off (FTO) + Holidays

- Commuter Benefits (In-Office & US Only)

- Monthly Wellness Stipend

- Autonomous Work Environment

- In Office Set-Up Reimbursement (In-Office Only)

- Quarterly Team Gatherings

- In Office Amenities (In-Office Only)

## Skills

### Required
- agentic architectures
- Model Context Protocol (MCP)
- LangChain
- AutoGen
- CrewAI
- ReAct frameworks
- vector database technologies
- Python
- Go
- TypeScript/JavaScript
- OWASP Top 10 for LLMs & AI Agents
- NIST AI RMF
- MITRE ATLAS

### Nice to have
- Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly)

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/replit/df7b6d30-9da1-4ace-8121-17c2aa55aa6f?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)