Zamp is hiring a

Web3 Senior Security Engineer

We are a fast-moving startup building agentic systems - intelligent, autonomous agents that can reason, act, and collaborate to solve complex tasks. Our mission is to create a secure, scalable, and developer-friendly platform that enables fast, safe, and reliable deployment of AI agents in real-world environments.

Security and trust are foundational to our platform. We’re looking for a Senior Security Engineer to lead our efforts in securing everything from the model to the infrastructure, ensuring that safety and privacy are first-class citizens in the age of AI agents.

As a Senior Security Engineer, you will be responsible for designing, implementing, and continuously improving the security architecture of our platform. You’ll work closely with engineering, product, and infrastructure teams to ensure the secure development and operation of our agentic systems, which interact with sensitive data, APIs, and third-party services.

Define and implement the overall security strategy for the platform and supporting infrastructure.

Secure cloud-native, agentic architectures involving LLMs, APIs, and data pipelines.

Integrate secure coding practices and threat modeling into the SDLC.

Conduct security design reviews and code audits across AI and agent workflows.

Partner with dev teams to secure APIs, sandboxed agents, and execution environments.

Design and implement guardrails for autonomous agents to prevent prompt injection, model hallucination risks, or undesired behaviors

Implement controls for data privacy, PII/PHI masking, tokenization, retention, and deletion.

Ensure secure data flows between user input, AI agents, and external systems.

Contribute to AI risk management frameworks (e.g., model explainability, bias, adversarial robustness).

Manage IAM, VPC, secrets management, network hardening, and secure CI/CD pipelines.

Lead vulnerability management, container security, and endpoint protection.

Own security incident response and forensic readiness.

Contribute to achieving and maintaining relevant compliance (SOC2, ISO 27001, etc.).

Define and enforce security policies (acceptable use, data classification, access control, etc.).

Build security checks into infrastructure-as-code, CI/CD, and agent deployment flows.

Use tooling for static analysis, runtime monitoring, DLP, etc.

Regularly perform internal penetration testing and coordinate with third-party testers.

Identify and remediate vulnerabilities before they can be exploited in production environments.

Ensure coverage across APIs, agents, cloud infrastructure, and LLM integrations.

4+ years of experience in security engineering, preferably in fast-paced or startup environments.

Deep knowledge of cloud-native security (AWS/GCP), containerization (Docker/K8s), and DevSecOps.

Strong understanding of secure software development and common vulnerabilities (e.g., OWASP Top 10, SSRF, LFI, RCE).

Experience securing LLM pipelines, agents, or machine learning infrastructure (preferred).

Experience working with data privacy regulations (GDPR, CCPA) and industry standards (SOC2, ISO).

Proficiency with tools like Vault, Snyk, Prisma Cloud, Trivy, etc.

Excellent communication skills and ability to influence security practices across teams.

Experience securing AI/LLM-based applications or agentic systems.

Exposure to red-teaming or adversarial threat modeling for AI workflows.

Contributions to open-source security or AI safety projects.

Perks: