Agent Security Engineer
Belmont Lavan Ltd Luxembourg, Luxembourg
IT System Custom Software Development · 2-10 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
Design security guardrails and governance controls for autonomous AI agents, and test agent systems for attacks before and after production deployment. Work across AI engineering and security to enable secure agent deployment with identity controls, least-privilege access, monitoring, and testing.
What they look for
Requirements
Requires at least five years of security engineering experience, including at least one year securing LLM or agent-based systems, plus hands-on knowledge of LLM attack techniques and identity and access controls. Candidates should have strong Python skills and proficiency in another listed language, familiarity with agent frameworks and protocols, cloud security experience, and the ability to communicate AI risks to technical and business audiences.
Full description
Belmont Lavan is hiring an Agent Security Engineer to secure autonomous AI agents before and after they reach production. Agents now call tools, hold credentials and act on live systems, so they need the controls we already expect for people and services: identity, least-privilege access, monitoring and testing.
You will sit between AI engineering and security. You will design the guardrails, attack the systems yourself, and build the governance controls that let the business deploy agents with confidence.
- 5+ years in security engineering (AppSec, cloud security, IAM or offensive security), with at least 1 year securing LLM or agent-based systems
- Hands-on knowledge of LLM attack techniques: prompt injection, jailbreaks, data exfiltration via tools, RAG poisoning
- Experience designing identity and access controls: OAuth 2.0 / OIDC, token exchange, workload identity, secrets management
- Working knowledge of agent frameworks and protocols such as LangGraph, OpenAI Agents SDK, CrewAI or Model Context Protocol (MCP)
- Strong coding skills in Python, plus one of Go, TypeScript or Rust
- Cloud security on AWS, Azure or GCP, including logging, detection and policy-as-code (e.g. OPA / Cedar)
- Ability to explain AI risk clearly to engineers, risk teams and executives
Similar roles
-
Partner Sales Manager – Cybersecurity Alliances & MSSP
Censys United States · $220K–$320K/yr
-
Lead Cybersecurity Architect
JPMorgan Chase & Co. Wilmington, Delaware, United States
-
Cybersecurity Shift Incident Manager
Triangle Cyber, LLC Arlington, Virginia, United States
-
[GS] Cybersecurity - Penetration Test Engineer
Bosch Group Ho Chi Minh City, Vietnam
-
Vulnerability Management Lead / Senior Staff Security Engineer
Coupang Seoul, South Korea
-
Staff Security Engineer(AI-Driven Vulnerability Discovery & Remediation)
Coupang Seoul, South Korea