Application Security Engineer
LangChain · San Francisco, CA
About this role
**About LangChain** LangChain’s mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering—helping developers move from prototypes to production-ready AI agents. Our platform includes LangSmith (observability, evaluation, deployment, fleet, and sandboxes), open-source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. **About the role (Application Security Engineer)** You’ll be the hands-on security lead embedded with core product teams to secure agentic workloads end-to-end—from SDK through LangSmith/LangGraph services and customer integrations. You’ll define the security roadmap, deliver immediate hardening wins, and raise the bar for protecting AI infrastructure in production. **What you’ll do** - **Own product & platform security:** Design and drive application/infrastructure security controls across LangSmith, LangGraph, and the LangChain SDK ecosystem (Python/TS/Go). - **Secure-by-default authN/Z:** Evolve SSO/SAML/OIDC/SCIM, token lifecycles, service-to-service auth, and tenant isolation for cloud and self-hosted customers. - **Ship code & reviews:** Land secure designs, write PRs, and introduce lightweight checks (linters, dependency/supply-chain scanning, SBOM/SLSA provenance). - **Hardening & operations:** Network segmentation/Zero Trust, Kubernetes posture, secrets management, key rotation, least-privilege IAM, and egress controls. - **Incident readiness:** Develop IR runbooks, detection rules, and tabletop exercises; lead post-incident forensics and blameless RCAs. - **Vulnerability management:** Own scanning/triage/patch SLAs; coordinate with engineering to remediate quickly without slowing delivery. **How to be successful** - **5+ years** in security engineering with strong software skills (Python or Go; TypeScript a plus). - Depth in **cloud/Kubernetes security** (e.g., GCP/AWS IAM, workload identity, admission controls, network policies). - Hands-on **AppSec**: code review, threat modeling, secure design, secrets & key management, authn/z patterns, multi-tenant isolation. - Experience building **detection & response** and running incident management. - Familiarity with **supply-chain security** (SBOM, sigstore/cosign, SLSA-style controls) and dependency risk management. - Clear, pragmatic communication with engineers and customers. **Nice to have** - Security for **SaaS + self-hosted** offerings, including air-gapped deployments. - Exposure to **SOC 2 / ISO 27001** programs and evidence automation. - Experience with **Go services**, **Infra as Code** (Terraform/Helm), and **policy-as-code** (OPA/Gatekeeper/Kyverno). - Knowledge of **privacy patterns** (data minimization, retention, masking, workspace scoping). **Compensation & Benefits** - Competitive compensation with base salary, meaningful equity, and benefits (health/dental coverage, flexible vacation, 401(k), life insurance). - **Annual salary range:** **$175,000–$215,000 USD** (Senior Engineers). Actual compensation varies by role, level, and location. - Benefits also include medical/dental/vision coverage, flexible vacation, and a 401(k) plan.
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.