Back to jobs
New

Senior Security Engineer

San Francisco, CA

Security Engineer - AI Agents

About Cosmon

Cosmon is building the AI infrastructure that helps hardware engineers design and build the next generation of ships, planes, rockets, and more.

Think Claude Code and Codex, but built for hardware engineering. Cosmon's Nexus Agents are already being used by 3,000+ users and production teams at companies including Tesla, BMW, Meta, and Amazon.

The company has raised $32M from investors and operators including Eric Schmidt, early backers of Anthropic and OpenAI, SV Angels, SPC, and Bison. The team brings together alumni from Google Brain, Airbnb, Stanford, and CMU, with research published in Nature, NeurIPS, and ICLR.

The Role

Cosmon is looking for a Senior/Staff Security Engineer to help build the security foundations for the next generation of AI agents.

You'll work at the intersection of developer experience, enterprise desktop security, and agentic security, helping ensure that AI agents can operate effectively in enterprise environments without compromising security.

This is a highly hands-on role for an engineer who enjoys solving difficult security problems, moving quickly, and having significant ownership in an early-stage environment.

What You'll Do

  • Design and implement security systems for AI agents operating across enterprise environments

  • Own and improve enterprise desktop security for agentic workflows

  • Identify and mitigate security risks associated with AI agents, developer tooling, and desktop environments

  • Build security controls and infrastructure that enable developers and enterprise customers to safely use AI agents

  • Partner closely with engineering and product teams to incorporate security throughout the development lifecycle

  • Develop tooling and experiences that make secure development easier for engineers

  • Investigate emerging threats and vulnerabilities across AI agent systems and enterprise environments

  • Help establish security architecture, policies, and best practices as the company scales

  • Participate in on-call rotations and respond to security issues when they arise

  • Operate with significant autonomy and ownership across ambiguous, high-impact security problems

What We're Looking For

  • Senior or Staff-level software/security engineering experience

  • Strong background in security engineering, application security, endpoint/desktop security, or a related discipline

  • Experience building and shipping production software

  • Strong programming skills in TypeScript and/or Python

  • Experience with cloud infrastructure, ideally GCP, although cloud provider experience is not required to be specific to GCP

  • Experience securing developer environments, enterprise desktops, endpoints, or agentic systems

  • Strong understanding of security architecture, threat modeling, authentication/authorization, and common security vulnerabilities

  • Ability to work across infrastructure, application, and product layers

  • Comfortable operating in a highly ambiguous, fast-moving startup environment

  • Strong communication skills and the ability to work closely with engineers, product teams, and customers

The Environment

Cosmon is an early-stage company moving quickly. This role is best suited for someone who enjoys high ownership, hard technical problems, and a demanding environment.

You should be comfortable with:

  • Working 5 days per week in our San Francisco office

  • On-call responsibilities

  • Hard deadlines and rapidly changing priorities

  • Taking ownership of problems without waiting for perfect requirements

  • Working through high-pressure situations and shipping when the stakes are high

Why Cosmon?

Build AI that builds the physical world. You'll work on technology designed to help engineers build ships, planes, rockets, and other complex physical systems.

Work with serious customers. Tesla, BMW, Meta, Amazon, and thousands of other users are already using Cosmon's technology in production workflows.

Join a technically exceptional team. The team includes alumni of Google Brain, Airbnb, Stanford, and CMU, with research published in Nature, NeurIPS, and ICLR.

Build from the ground up. You'll have meaningful ownership over security architecture and infrastructure as Cosmon scales its AI agent platform.

Backed by experienced investors. Cosmon has raised $32M from investors and operators including Eric Schmidt and early backers of Anthropic and OpenAI.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in elly’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...