Senior Security Engineer

About Parcle

Parcle is building an AI-powered executive assistant for founders and teams — an autonomous AI Agent platform that manages calendars, communications, tasks, and workflows on behalf of users. We build on top of frontier foundation models, focusing our engineering on safety, reliability, and privacy.

The Role

We're hiring a Senior Security Engineer to own the security posture of our AI Agent platform. You'll be owning the security foundations of the product.

Core Security Challenges

• Agent Safety & Operational Boundaries — Prevent agents from executing harmful or unauthorized actions. Design permission models and human-in-the-loop confirmation flows.

• User Privacy & Data Protection — Ensure user data (emails, calendars, files) never leaks. Build data isolation and encryption mechanisms.

• Prompt Injection Defense — Protect agents from indirect injection attacks via emails, documents, and web content. Design detection and sandboxing strategies.

• Third-Party Integration Security — Secure OAuth flows, API credentials, and external service data exchange.

• Abuse Prevention — Build rate limiting, anomaly detection, and behavioral monitoring systems.

Requirements

• 5-8 years of application security, product security, or security engineering experience

• Deep understanding of web security fundamentals (OAuth, authentication, authorization, API security)

• Practical knowledge of LLM applications (prompt flows, context windows, injection/exfiltration risks)

• Proficient in Python; comfortable with TypeScript/JavaScript

• Cloud security experience (AWS/GCP/Azure), container security, and secrets management

• Prior experience securing AI agent/assistant products is a strong plus

What We Offer

• Competitive compensation (cash + equity)

• Remote-friendly — flexible work locations

• Small, high-caliber team — your work ships fast and matters

• Foundational security role — shape the security architecture from day one