SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Relevance AI is building an AI workforce platform that empowers teams to create and manage intelligent agents handling workflows, decisions, and collaboration. The company powers industry leaders including Canva, Databricks, Confluent, Autodesk, Lightspeed, and Rakuten. Backed by Bessemer Venture Partners with a Series B raise in April 2025, Relevance AI is headquartered in San Francisco with a Sydney office.
As Staff Application Security Engineer, you'll be the specialist driving application and product security for a platform of autonomous agents that plan, decide, and act on behalf of enterprise customers. This role addresses a new threat surface: while traditional AppSec playbooks apply to the product, APIs, and production environment, the harder questions emerge around agent autonomy—how to let agents act on real work safely, how to contain prompt injection when models can't reliably distinguish instructions from data, and how to build guardrails for safe agent operation.
You'll report to the Head of Engineering in a specialist individual contributor role with no direct reports. Your impact includes migrating access control to new models and closing gaps, securing the product surface (authn/authz, API security, input/output handling, supply-chain risk), building guardrails for safe agent operation (permissions, attribution, sandboxing, tool-use limits, prompt-injection defense), establishing least-privilege access across production, and working toward autonomous security teams using agents to continuously scan the platform and remediate findings.
The ideal candidate has deep AppSec experience on production platforms (authn/authz, API security, secure design, supply-chain risk), hands-on ownership mentality, systems thinking for autonomous systems design, and familiarity with the tech stack: TypeScript, AWS, MCP, and AI engineering fundamentals. You should be comfortable building with agents and thinking about security in the context of agentic systems. This is a hands-on, specialist role for someone who wants to make security a product strength while staying close to the code.
The company operates on a hybrid model (3 days in office required in Sydney) and will sponsor relocation for candidates from the UK or Europe.
