Application Security Engineer - Agents platform

ABOUT ELEVENLABS ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $22B - multiples of 11, always. We have expanded from voice into three main platforms: - ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale. - ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages. - ElevenAPI gives developers access to our leading AI audio foundational models. Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you. HOW WE WORK - High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy. - Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you. - AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations. - Excellence everywhere: Everything we do should match the quality of our AI models. - Global team: We prioritize your talent, not your location. WHAT WE OFFER - Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible. - Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities. - Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend. - Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose. - Annual team offsite: Each year, we bring your entire team together in a new location - past offsites have included Croatia, Italy and Cancún - Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend. ABOUT THE ROLE ElevenAgents is our platform for building and running conversational AI agents at scale. As our first Application Security Engineer embedded in the Agents team, you’ll make the secure way the easy way. You’ll build the security tooling and reusable primitives that let engineers ship securely by default. This is a builder role. Expect to spend about 70% of your time building tools and internal systems, and the rest working with engineers, staying in sync with Core Security, and doing security research. More than half of the work is greenfield and most of it starts with you, you’ll spot the problems worth solving and own each solution from idea to production. You will: - Build security primitives that are easy for engineers to adopt, starting from what you find when you audit the Agents codebase - Review new product work for security and feed what you learn back into shared tooling - Lead the major security improvements to the Agents platform, working closely with Core Security - Make sure Agents platform uses authn and authz controls correctly and building the guardrails that keep the platform from compromising on security best practices - Set the security bar for the Agents platform and make meeting it the easy path for product engineers - Work with engineers daily to help them ship fast and safely REQUIREMENTS - 5+ years in application security engineering at scale, covering secure design, vulnerability management and security tooling - Strong software engineering skills: you have built and shipped products end to end, in production-quality code - Fluency in Python, our main language. Golang or another language is fine if you can pick up Python quickly - Hands-on experience with authentication and authorization. Experience securing cross-service communication is a bonus - Experience with large-scale, customer-facing backend systems and enterprise-grade security - Clear communication and a real enjoyment of working with developers - A track record of owning delivery end to end Bonus: - Security for AI and LLM applications - Cloud-native experience (AWS or GCP, Kubernetes, Terraform, IAM, networking, Linux internals) - Experience in regulated environments (SOC 2, ISO 27001, PCI, HIPAA) - Not required: Compliance certifications, incident response experience, a traditional security background, or prior domain knowledge. We care about what you have built and shipped, and open source work or conference talks are welcome evidence of that. LOCATION This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in Dublin, London or Warsaw We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.