Senior Software Engineer - Application Security

<p>Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications.</p>

<p>Since our public launch, we've crossed <strong>$130M in ARR</strong> and grown to <strong>over 10M users across 190+ countries</strong>, who have built <strong>12M+ applications</strong> on Emergent. We're backed by <strong>Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.</strong></p>

<p>We're solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by <strong>repeat founders, Olympiad medalists, IIT & IIM alumni,</strong> and leaders from <strong>Google, Amazon, and Dropbox.</strong></p>

<p>We're hiring builders who want ownership, speed, and impact at global scale.</p>

<p><strong>The Role:</strong><br>Emergent runs a massive, multi-tenant, AI-driven execution environment where code is generated and executed continuously. You will secure the infrastructure that powers autonomous software creation.</p>

<p><strong>What You'll Do:</strong></p>

<h3><strong>What You’ll Do</strong></h3>

<p><strong>Secure AI-generated applications at scale</strong></p>

<ul>

<li>Define security patterns for applications generated by AI agents</li>

<li>Enforce guardrails across auth, data access, APIs, and business logic</li>

<li>Build frameworks to ensure secure-by-default app generation</li>

</ul>

<p><strong>Design “secure generation” systems</strong></p>

<ul>

<li>Work directly with AI/agent pipelines to prevent insecure code from being produced</li>

<li>Build validation layers for generated code (static + semantic)</li>

<li>Detect prompt injection and adversarial input patterns</li>

</ul>

<p><strong>Own application threat modeling</strong></p>

<ul>

<li>Identify vulnerabilities in dynamic app creation flows</li>

<li>Analyze risks in multi-tenant user-generated environments</li>

<li>Build reusable threat models for agent-driven systems</li>

</ul>

<p><strong>Build developer-facing security primitives</strong></p>

<ul>

<li>Auth systems, permission frameworks, secure SDKs</li>

<li>Secure API gateways and rate limiting</li>

<li>Input/output validation layers for LLM-driven flows</li>

</ul>

<p><strong>Red team AI-generated apps</strong></p>

<ul>

<li>Break applications generated by Emergent agents</li>

<li>Identify systemic weaknesses vs one-off bugs</li>

<li>Feed learnings back into generation systems</li>

</ul>

<h3><strong>What We’re Looking For</strong></h3>

<ul>

<li>5–10+ years in <strong>Application Security </strong></li>

<li>Strong coding ability (Python, JS/TS, backend systems)</li>

<li>Deep understanding of:</li>

<ul>

<li>OWASP Top 10</li>

<li>Auth & session management</li>

<li>API security</li>

<li>Injection & sandbox escape vectors</li>

</ul>

<li>Experience working closely with product/engineering teams</li>

</ul>

<h3><strong>What Sets You Apart</strong></h3>

<ul>

<li>You think in <strong>systems, not vulnerabilities</strong></li>

<li>You want to <strong>prevent insecure code from ever existing</strong></li>

<li>Experience with:</li>

<ul>

<li>AI/LLM systems</li>

<li>Prompt injection & output validation</li>

<li>Secure code generation systems</li>

</ul>

</ul>

<p><strong>Why Emergent</strong></p>

<ul>

<li>Build security for <strong>AI systems that build software</strong></li>

<li>Operate at <strong>global scale (millions of apps, millions of users)</strong></li>

<li>Work directly with founders and core engineering</li>

<li>Solve problems that don’t exist anywhere else yet</li>

</ul>