Application Security Engineer (AI)

Location: San Francisco, CA, United States; Onsite

Annual base salary: $175,000–$215,000 USD for Senior Engineers

Company

LangChain builds AI agent engineering products and open-source frameworks, including LangChain, LangGraph, Deep Agents, LangSmith, and LangSmith Engine.

What you will do

• Lead product and platform security across LangSmith, LangGraph, and the LangChain SDK ecosystem.
• Design secure authentication and authorization, including SSO, SAML, OIDC, SCIM, token lifecycles, service-to-service authentication, and tenant isolation.
• Write secure code and reviews while introducing linters, dependency and supply-chain scanning, SBOMs, and provenance controls.
• Harden cloud infrastructure through network segmentation, Zero Trust, Kubernetes security, secrets management, key rotation, least-privilege IAM, and egress controls.
• Develop incident-response runbooks and detection rules, run tabletop exercises, and lead forensics and blameless root-cause analyses.
• Own vulnerability scanning, triage, patch SLAs, and remediation coordination with engineering.

Requirements

• 5+ years of security engineering experience with strong software skills in Python or Go; TypeScript is a plus.
• Strong experience with cloud and Kubernetes security, including GCP/AWS IAM, workload identity, admission controls, and network policies.
• Hands-on application security experience with code review, threat modeling, secure design, secrets and key management, authentication and authorization patterns, and multi-tenant isolation.
• Experience building detection and response capabilities and managing incidents.
• Familiarity with supply-chain security, including SBOM, Sigstore/Cosign, SLSA-style controls, and dependency risk management.
• Clear, pragmatic communication with engineers and customers.

Nice to have

• Security experience for SaaS and self-hosted offerings, including air-gapped deployments.
• Exposure to SOC 2 and ISO 27001 programs and evidence automation.
• Experience with Go services, Terraform, Helm, and policy-as-code using OPA, Gatekeeper, or Kyverno.
• Knowledge of privacy patterns such as data minimization, retention, masking, and workspace scoping.

Culture & Benefits

• Full-time onsite position with meals on in-office days in the US.
• Medical, dental, and vision coverage, life insurance, and a 401(k) plan.
• Flexible vacation and meaningful equity.
• EU, UK, and APAC team members receive locally competitive benefits aligned with regional norms and regulations.