Senior Security Engineer, AI Enablement

The Senior Security Engineer AI Enablement is Securitys embedded full-time representative on JLLs Falcon team owning the products security architecture for agents MCP integrations and identity end-to-end rather than reviewing it after the factadvancing APEX 2030s mandate that AI products are built securely by design not secured after launch. Reporting to the Head of AI Security while sitting day-to-day with Falcons engineers this role requires the technical depth to write and review production code architect agentic identity and permissioning and represent Falcons security posture credibly to the broader Cybersecurity organization.

KEY RESPONSIBILITIES

Embedded Product Security Partnership

• Sit inside the Falcon team as securitys full-time technical representative participating in planning design reviews and sprint work rather than reviewing finished features after the fact.

• Serve as the primary point of contact between Falcon and the broader Cybersecurity organizationtranslating security requirements into product decisions the team can act on immediately.

• Build enough trust and technical credibility with Falcons engineers that security is treated as a design input not a release gate.

Agent MCP & Identity Architecture

• Own the security architecture for Falcons use of agents MCP servers and tool integrations defining permission boundaries trust boundaries and blast radius for every agent-to-tool and agent-to-agent interaction.

• Review and harden the identity model underpinning Falcons agentic components including:

• Service-to-service and agent-to-tool authentication

• Scoped least-privilege credentials for every MCP server and tool connection

• Session and delegation boundaries when agents act on a users behalf

• Audit logging sufficient to reconstruct what an agent did and why

• Design secure patterns for prompt handling tool-calling and data flow specific to Falcons product surface informed by how the Claude Agent SDK and MCP actually work under the hood.

• Partner with the Head of AI Security to align Falcons architecture with enterprise AI security standards without slowing product velocity.

Product Enablement Ownership

• Own the security component of Falcons product enablement work end-to-end from threat modeling new features to defining the guardrails that ship with them.

• Write and maintain the security requirements configuration standards and secure-by-default patterns that Falcons engineers build against rather than producing a review checklist after the fact.

• Define what secure enough to ship means for each Falcon releasebalancing genuine risk against the teams delivery timeline.

Cross-Functional Technical Input

• Represent Falcons security posture and roadmap to the broader Cybersecurity organization including the Head of AI Security and other AI Security team members.

• Provide deep technical input into cross-functional security discussions including third-party risk assessments and enterprise AI governance decisions where Falcons architecture is relevant.

• Collaborate with identity cloud security and application security teams to ensure Falcons agentic components meet the same bar as any other production system.

Software Engineering Craft & Technical Depth

• Write and review code directly contributing to Falcons codebase where security-critical components such as auth permissioning and agent orchestration are involved rather than advising from the sidelines.

• Maintain hands-on fluency with the Claude Agent SDK MCP and modern identity protocols including OAuth OIDC and workload identity standards as Falcons architecture evolves.

• Stay current on agentic security research and real-world incidentsbringing relevant lessons back to Falcon before they become the teams problem.

REQUIRED QUALIFICATIONS

• 6 years of security engineering experience including meaningful time embedded directly within a software product or engineering team rather than in a purely advisory security function.

• Strong software engineering skills with the fluency to read write and review production code alongside the engineers youre partnered with.

• Hands-on experience with agentic AI architectures including MCP servers tool-calling and the Claude Agent SDK or a comparable agent framework.

• Deep working knowledge of identity and access concepts including OAuth/OIDC service-to-service authentication and least-privilege credential design for both human and non-human identities.

• Demonstrated ability to operate as a technical peer to software engineers not just a reviewer earning influence through credibility rather than process authority.

• Excellent cross-functional communication skillsable to represent a single product teams architecture accurately to the broader security organization and vice versa.

PREFERRED QUALIFICATIONS

• Bachelors degree in Computer Science Engineering or a related field or equivalent practical experience.

• Prior experience as an embedded or product security engineer within an agile product team.

• Direct experience securing multi-agent systems RAG pipelines or MCP-based tool integrations in production.

• Familiarity with the OWASP LLM Top 10 MITRE ATLAS or comparable agentic and AI threat frameworks.

• Experience with workload identity frameworks such as SPIFFE/SPIRE or modern non-human identity management.

• Certifications such as CISSP OSCP or GIAC credentials focused on application or cloud security.