About the Company

At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you.

About the Role

We are hiring a Platform DevSecOps Engineer to take total ownership of the Secure Software Development Lifecycle (SSDLC) for our agent harness (the platform on which our AI agents run) and the agents themselves. You will be the single point of accountability for security across how these systems are built, configured, deployed, and operated, and the internal champion who makes secure-by-default the path of least resistance for every team that touches them. This is a hands-on platform security role, not a governance or compliance-desk role: you will live in the pipelines, the infrastructure-as-code, the Kubernetes clusters, and the secrets management, and you will spend as much time influencing people as you do writing configuration.

This role does not cover overall corporate security governance, including IT/fleet and device management, endpoint administration, or corporate compliance-framework attestation (SOC 2, ISO 27001, and similar). Those sit with our corporate security and IT functions, and you will collaborate with them where platform security intersects without being accountable for them.

Responsibilities

• Own end-to-end SSDLC for the agent harness and the agents: threat modeling, secure design review, pre-merge scanning, supply-chain integrity, runtime hardening, and vulnerability remediation from discovery through verified rollout
• Define security best practices for base-platform and agent configuration, encoding them into the GitOps and CI/CD paths so they're enforced automatically rather than by memo, and hold the line on them in review
• Drive supply-chain security, including SBOM/VEX generation, dependency provenance, artifact signing/promotion controls, and keeping build and dependency resolution flowing through trusted internal registries rather than the open internet