Platform Security Engineer

📋 Job Overview

In this role, you will design and build the System Integrity Layer, establishing the foundational platform primitives that guarantee every agent action is isolated and attributable, every execution is traceable, every state transition is verifiable, and every software release satisfies strict security constraints by construction. This is a hands-on backend security engineering role where security, threat resilience, and compliance are natural outcomes of brilliant system architecture, not separate, bureaucratic processes. We are looking for a builder, not a governance operator—someone who treats trust guarantees as core system properties designed directly into the database and application layers from day one. Architecture or technical-leadership experience is fine, even welcome, as long as it comes with real hands-on depth you can point to—specific systems you designed and built—rather than process, documentation, or audit-standardization work alone.

🏢 About causaprima

causaprima is a company focused on building secure and reliable systems for autonomous agents and distributed networks.

🎯 The Role

You will be responsible for designing and building the System Integrity Layer, ensuring that every agent action is isolated and attributable, every execution is traceable, and every state transition is verifiable. You will also conduct proactive threat modeling and build append-only, tamper-resistant event systems.

✅ Key Responsibilities

• Design the core execution model that governs how autonomous agents run, interact, and modify system state.
• Conduct continuous, code-level threat modeling across our distributed networks to identify structural vectors, memory leakage, prompt manipulation, and authorization bypasses.
• Build append-only, tamper-resistant event systems that make every action reconstructable without relying on external logging frameworks or reactive "audit tooling".
• Engineer strict execution and data isolation layers between agents, users, and workflows in a multi-tenant infrastructure.
• Run active internal pentesting, adversarial chaos testing, and targeted red teaming exercises against our own infrastructure.
• Ensure all automated, agentic accounting processes are strictly attributable, deterministic where required, verifiable in hindsight, and unalterably constrained by explicit system rules.
• Architect and refine our internal software delivery pipeline to guarantee absolute integrity from code commit to production deployment.
• Build deterministic verification mechanisms into the CI/CD pipeline, ensuring that all third-party dependencies, agent libraries, and compiled services are cryptographically signed, scanned, and secure by default.
• Translate complex regulatory and audit requirements directly into low-level system constraints.

📌 Required Qualifications

• 5+ years designing production backend platforms and distributed systems design.
• Deep schema design, RLS, and event-sourcing database expertise.
• Practical application-level security, encryption models, key management, and auth patterns.
• Hands-on experience with Cerbos, OPA, Cedar, or similar.
• Domain knowledge of the security stack, not just one narrow slice of it.

⭐ Desirable Experience

• Cryptographic primitives
• Event streaming (Kafka/Redpanda)
• Kubernetes and cloud-native architecture knowledge
• LLM/agentic system security exposure (prompt injection defense, guardrails, agent threat modeling)

🎁 Benefits

Competitive