SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 220,000 - 265,000 / annual
Gradial is building AI-native systems for enterprise marketing, with agents that execute campaigns across tools, teams, and workflows. The company is Series C-funded ($65M led by Insight Partners) and serves Fortune 500 customers including AWS, T-Mobile, and Prudential.
As Gradial's first dedicated security engineer, you'll join as a Staff Security Engineer, AI and own product and platform security end-to-end as the company scales. This is a deeply hands-on Staff IC role where you'll set technical direction for security, build critical systems and controls, and partner closely with engineering. You'll work alongside the IT and compliance lead (who owns GRC and corporate IT) and have significant autonomy to determine where security investment has the greatest impact.
Key responsibilities include:
- Define and drive Gradial's product and platform security strategy, prioritizing investments against risks that matter most
- Lead threat modeling for the agentic platform and design protections across agent behavior, permissions, isolation, customer data, and platform boundaries
- Harden application and cloud infrastructure across production access, IAM, secrets management, and CI/CD supply chain
- Partner with engineering to build secure-by-default patterns into agent, service, and infrastructure design
- Own security detection and incident response for the platform, including logging standards, detection coverage, and response processes
- Represent technical security in enterprise customer reviews and architecture discussions
- Own technical controls supporting SOC 2 compliance in partnership with IT and compliance lead
- Help shape the future of security at Gradial, including identifying capability gaps and hiring future security team members
Requirements:
- 8+ years of security engineering experience, including Principal or Staff-level ownership across complex production systems
- Deep product security experience across threat modeling, secure architecture, authentication/authorization, and multi-tenant systems
- Strong hands-on experience with cloud security, Kubernetes, IAM, and infrastructure as code
- Strong technical point of view on securing LLM and agent-based systems, with ability to reason about emerging risks from first principles
- Experience leading security incident response for production services and improving systems based on learnings
- Track record of writing and shipping production code, security tooling, or infrastructure (not just reviewing others' work)
- Strong judgment and comfort making pragmatic security tradeoffs in fast-moving environments without established playbooks
- Clear communication with engineers, company leadership, and enterprise customer security teams
Nice to have:
- Experience as early security hire at high-growth B2B SaaS, AI, or infrastructure company
- Experience building security detections, telemetry, and logging pipelines in cloud environments
- Experience implementing technical controls for SOC 2 or ISO 27001, or contributing to AI security research, standards, or open-source security tooling
