SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
NowSecure is seeking a Senior Agentic Security Automation Engineer to design and build AI-driven autonomous security testing systems. The role focuses on architecting advanced AI agents capable of autonomous reasoning and security analysis, designing multi-step agentic workflows that replicate and scale expert security testing methodologies, and developing systems to analyze applications across desktop, IoT, APIs, and emerging platforms.
Key responsibilities include building agentic security testing systems using modern AI frameworks, designing reusable security automation frameworks and tool orchestration infrastructure, integrating static/dynamic analysis, reverse engineering, network analysis, and custom security tooling into agent workflows, and staying current on advancements in agentic AI and offensive security.
You'll work with the company's world-renowned research team (creators of Frida and radare2) to transform security testing from a human-limited activity into a technology-enabled capability that can analyze more applications, execute broader test coverage, identify meaningful security issues, and continuously improve. This is a highly autonomous role with significant freedom to experiment, iterate, and help define the future of AI-driven security testing.
Required qualifications: coding experience in Python, JavaScript, or TypeScript; security background (offensive security background in penetration testing, application security, or research preferred); curiosity and aptitude for AI with hands-on experience building with LLMs or agentic frameworks; U.S. citizenship (role supports U.S. government work).
Bonus experience includes LangGraph or similar agentic frameworks, integrating telemetry from multiple security tools, production experience with tool/function calling and prompt engineering, additional languages (Java, Go), production engineering/MLOps (Docker/Kubernetes, CI/CD, cloud platforms), and mobile/desktop application security testing.
