← All roles

Platform Security [US]

Brain Co.· Engineering
Apply on company site
Hybrid (San Francisco Bay Area)Full-timePosted 4w ago

About the role

Platform Security Engineer to design, build, and ship guardrails that keep AI agents safe when operating on real customer data. A hands-on software engineer role embedded with product and agent-platform teams, focused on code-based security controls rather than policy.

Responsibilities

  • Design and build guardrail services that mediate actions an AI agent takes, scoped permissions, tool-call validation, and hard limits on what an agent can read, write, or send
  • Write production code for data access controls that keep customer PII and sensitive records inside approved boundaries, even when an agent is orchestrating the request
  • Build reusable guardrail libraries and SDKs so product engineers can drop data protection and permissioning into new agent workflows without reinventing it each time
  • Design detection and containment for agent-specific failure modes, prompt injection, tool misuse, data exfiltration attempts, and build automated tests and red-team harnesses to catch them before production
  • Instrument agents with tamper-evident audit logs and decision trails so every customer-data access is explainable after the fact
  • Partner with product, platform and ML engineering to review new agent capabilities before launch and flag where guardrails are missing
  • Own the developer experience for guardrails: clear APIs, documentation, and low-friction integration so engineers adopt controls instead of routing around them
  • Help define and measure guardrail effectiveness, coverage across security workflows, false positive/negative rates, mean time to detect and contain

Qualifications

  • 5 to 8 years as a software engineer building and shipping production systems, with meaningful time spent on security, data protection, or trust & safety problems
  • Strong general-purpose programming skills (Python, Go, TypeScript, or similar)
  • Experience with or strong working knowledge of how AI agents operate in production, tool use, function calling, orchestration frameworks (LangChain, LangGraph, or similar)
  • Solid grasp of data protection fundamentals: PII handling, access control, encryption, and least privilege
  • Comfortable designing systems used by other engineers—clear interfaces, sensible defaults, predictable failure modes
  • Working cloud experience (AWS, GCP, or Azure) sufficient to build and deploy services securely
  • Comfortable across the SDLC, understands how developers work and designs guardrails that don’t create friction
  • Strong written English; able to write documentation and runbooks engineers actually read

Skills

Required:Production-grade software engineeringData protection and access controlGuardrail design and implementationCloud platformsDocumentation and runbooks
Last updated Sep 24, 2026. Interested? Apply on the company site.

About Brain Co.

AI for the world's most important institutions

Building an AI platform and applications to deliver impact for real-world problems.

AIPlatformApplicationsInstitutions
Company profileWebsite

More open roles at Brain Co.