Note: The job is a remote job and is open to candidates in USA. Sciata is seeking an experienced Senior AI Security Platform Engineer / Tech Lead to support the buildout of an Agentic Vulnerability Remediation Platform. This role involves architecting and operating AI-driven systems for identifying and remediating security vulnerabilities autonomously at scale.

Responsibilities

• Design and implement production-grade agentic systems capable of autonomous vulnerability triage, analysis, and patch generation using LLM-based orchestration frameworks such as LangChain, LangGraph, AutoGen, CrewAI, Semantic Kernel, or similar tools
• Build and maintain scalable backend platforms, APIs, SDKs, and developer tooling used by internal engineering teams and security practitioners
• Define architectural best practices for agent workflow management, tool usage, memory, guardrails, observability, and safe automated actions
• Integrate the platform with vulnerability scanners, SAST/DAST tools, SBOM systems, ticketing platforms, and CI/CD pipelines
• Lead complex cross-functional technical initiatives across security engineering, platform infrastructure, AI/ML, and application development teams
• Define technical roadmaps, contribute to engineering strategy, and help drive build-versus-buy decisions
• Mentor engineers on agentic AI patterns, secure coding practices, DevSecOps automation, and platform reliability
• Conduct design reviews, architecture decision records, and retrospectives to continuously improve engineering quality
• Ensure the platform meets enterprise-grade standards for availability, performance, security, and auditability
• Implement observability, including logging, metrics, tracing, and runbooks for agentic workflows in production
• Partner with security teams to ensure the platform follows secure-by-design principles
• Drive automation and feedback loops to improve MTTR for vulnerability remediation

Skills

• 8+ years of professional software engineering experience building and operating production platforms, backend services, or developer tooling
• Proven experience leading complex, cross-team technical initiatives from design through production delivery
• Hands-on experience with AI/ML systems in production, especially LLM-based agents, orchestration, tool-calling, or prompt engineering at scale
• Strong experience with Python and/or Go for backend development; Rust or Java experience is a plus
• Strong knowledge of cloud platforms such as AWS, GCP, or Azure
• Experience with infrastructure-as-code tools such as Terraform or Pulumi
• Experience with Docker, Kubernetes, and modern CI/CD systems such as GitHub Actions, ArgoCD, or Tekton
• Familiarity with agentic AI frameworks such as LangGraph, AutoGen, CrewAI, Semantic Kernel, LangChain, or similar technologies
• Understanding of common vulnerability classes, including CVEs, CWEs, OWASP Top 10, and remediation strategies
• Experience integrating APIs and tools across security, DevOps, and engineering platforms
• Strong communication skills with the ability to influence technical direction across multiple teams
• Prior experience with security tooling, vulnerability management, DevSecOps automation, or application security
• Experience building autonomous remediation, code-fix generation, patch generation, or PR automation pipelines
• Experience with security tools such as Snyk, Veracode, Semgrep, Wiz, Tenable, or similar platforms
• Knowledge of software supply chain security, SBOM standards such as SPDX or CycloneDX, and dependency analysis
• Familiarity with static analysis, dynamic analysis, and AST manipulation for automated code fixes
• Experience working in regulated environments such as finance, healthcare, government, or other compliance-heavy industries
• Familiarity with compliance frameworks such as SOC 2, FedRAMP, or ISO 27001
• Certifications such as CISSP, CEH, AWS/GCP Security Specialty, or Certified Kubernetes Security Specialist are a plus
• Contributions to open-source security, AI/ML, or developer tooling projects are a plus

Company Overview