Job Description

Experienced security engineer focused on application security. Work with product teams on systems that strengthen Wave’s security posture. Broad scope: application security, infrastructure/database security, and AI agent guardrails (prompt injection, permissions, data exfiltration). Customers trust Wave with their money — this role sits at the front of keeping that trust.

Job Responsibility

Responsibilities: • Own and improve application security with product teams • Help infrastructure think about security for databases and production systems • Define and enforce guardrails for AI-powered agents in engineering and operations • Secure agentic tooling against prompt injection, excessive permissions, and data exfiltration • Build policies and technical controls for AI usage across the company • Recent project types: agentic SIEM/SecOps pipelines; MCP integration security; code security review agents; AI governance standards; privileged access management; secrets management with ephemeral secrets; public API security reviews Requirements: • 7–8 years professional experience, with at least 3–5 years in a security-related role • Strong experience with Python • Fluent English • Comfortable balancing security and velocity • Interest in securing agentic AI systems and helping engineers adopt secure patterns • Experience with complicated systems; security source-code review and/or penetration testing is a plus • Some familiarity with ISO-27001 / PCI-DSS is beneficial (not expected to run audits) • Remote from UTC −5 to +4 with reliable internet