Security Engineer, Application Security

About the Company

Serval is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end, backed by leading investors including Sequoia Capital and Redpoint Ventures.

Responsibilities

• Design, implement, and operate Serval's application security program, including secure SDLC, threat modeling, and secure design reviews.
• Build, lead, and mentor a team spanning product security, secure software development, and vulnerability management.
• Establish engineering rigor through secure coding standards and paved-path libraries.
• Improve security coverage by building and tuning automated tooling (SAST, DAST, SCA, secrets scanning).
• Own the end-to-end vulnerability lifecycle, including bug bounty and coordinated disclosure.
• Partner with Engineering and Product to drive authentication, authorization, tenant isolation, and data protection.
• Tackle novel security challenges unique to agentic AI, such as prompt injection and unsafe tool use.

Requirements

• 10+ years in cybersecurity with deep expertise in application security and vulnerability management.
• Proven experience building and leading application/product security and secure-SDLC functions.
• Strong software engineering fundamentals with the ability to read, write, and review production code.
• Deep expertise in modern security tooling (SAST, DAST, SCA, secrets detection, fuzzing) and cloud-native architecture.
• Understanding of modern adversary tradecraft (TTPs) and exploitation techniques.
• Exceptional communication skills and ability to influence engineering and product decisions.

Preferred Qualifications

• Passion for solving security challenges unique to AI agents.