Founding Security Engineer

Asymptote Labs•New York, NY

9d•$150,000 - $300,000

About The Position

Asymptote is building the AI Detection & Response layer for the agentic enterprise. AI agents are becoming enterprise infrastructure, but security teams have no unified system of record for what they're doing. Asymptote delivers the telemetry, detection, and response layer that makes AI agent activity observable and secure. Beacon is our open-source foundation powering that future. The Role: We're looking for a Founding Security Engineer to help build the security infrastructure for the agentic enterprise. AI agents are rapidly gaining access to source code, cloud environments, developer tools, credentials, internal data, and production systems. The security model for this world is still being invented. We're looking for an engineer who understands both sides of that problem: how attackers think and how production security systems need to work. Someone who can dissect a new agent attack in the morning, design the detection in the afternoon, and ship it into a production system used by security teams. This isn't a traditional security engineering role. You'll work directly with Asymptote's founders across security research, detection engineering, product, and infrastructure. You'll help determine what telemetry we collect, how we model agent behavior, what attacks we detect, and how customers investigate and respond to them. You'll be one of the earliest engineers defining the technical foundations of an entirely new security category. You'll have exceptional ownership from day one.

Requirements

5+ years of experience in security engineering, detection engineering, security infrastructure, backend engineering for security products, or adjacent fields.
Strong software engineering skills and experience building production systems.
Deep understanding of security fundamentals across identity, authentication, authorization, networks, cloud infrastructure, endpoints, or application security.
Experience working with security telemetry and turning large volumes of events into useful security signals.
Ability to think adversarially and understand how attackers abuse complex systems.
Experience designing and operating distributed systems, data pipelines, or security infrastructure in production.
Comfort moving between low-level technical investigation and high-level system design.
High agency and excited to build core infrastructure from the ground up.

Nice To Haves

Experience building EDR, SIEM, cloud security, detection & response, or security analytics products.
Experience writing production detection logic or behavioral detections.
Experience with AI agents, LLM infrastructure, MCP, coding assistants, or AI security.
Experience with eBPF, endpoint telemetry, runtime security, or system instrumentation.
Experience building high-volume event ingestion or streaming systems.
Experience investigating real-world attacks or working closely with incident response or threat research teams.
Open-source security contributions or security tooling used by other practitioners.
Experience building security products from an early stage.

Responsibilities

Design and build systems that ingest, normalize, and analyze high-volume AI agent activity.
Develop the security primitives that turn raw agent telemetry into useful detections, investigations, and response actions.
Build infrastructure that operates reliably across developer environments, CI/CD systems, cloud infrastructure, and enterprise AI deployments.
Design systems that can reason about identities, tools, permissions, resources, and actions across complex agent workflows.
Translate emerging attack techniques into production-grade detections.
Develop detections for prompt injection, tool abuse, privilege escalation, credential theft, data exfiltration, malicious MCPs, agent persistence, and other emerging threats.
Build behavioral detection systems that identify suspicious sequences of agent activity rather than relying only on static indicators.
Develop the infrastructure for rapidly deploying, evaluating, and improving new detections.
Determine what security-relevant signals need to be captured across AI agents and the systems they interact with.
Build integrations across coding agents, MCP servers, developer tooling, CI pipelines, cloud environments, and enterprise infrastructure.
Design schemas and data models capable of representing agent activity across heterogeneous systems.
Make telemetry collection performant, reliable, and useful for real-world investigations.
Build the systems security teams use to understand what an agent did, why it happened, and what was affected.
Develop investigation primitives for reconstructing complex agent activity across tools and environments.
Build response mechanisms that allow security teams to contain malicious or compromised agents.
Create workflows that turn detections into actionable security outcomes rather than another stream of alerts.
Partner closely with our security research team to reproduce emerging attacks and turn them into product capabilities.
Build adversarial environments for testing Asymptote against real attack techniques.
Develop evaluation frameworks for measuring detection quality, false positives, and coverage.
Contribute security tooling and infrastructure back to Beacon where appropriate.
Work directly with the founders to define Asymptote's architecture and product direction.
Talk with security teams at enterprise design partners to understand how AI agents are changing their environments.
Help determine which security problems we solve, which abstractions we build, and where we invest technically.
Own major parts of the product from initial design through production deployment.