Remote jobs in the United States

25+ jobs

Save this search

Added 2 hours ago
Engineering Leadership Roles – Data Centers
Rosendin Electric, Inc
Remote, United States
…brightest in the industry, we want to hear from you. Since our founding over 100+ years ago, Rosendin has been driven to positively impact the communities where we live and work. We are an…
Added 1 day ago
Agent Engineer
Clera
Remote, United States
- Demonstrated career progression within an organization or experience founding a startup, along with strong engineering fundamentals.
Added 1 day ago
Founding Forward Deployed Engineer
Clera
Remote, United States
Join an early-stage AI company serving the consumer packaged goods sector as a Founding Forward Deployed Engineer. You will connect the platform with customers' operations teams, owning…
Added 1 day ago
C
Product Engineer (Consumer, Design-Heavy)
Clera
Remote, United States
- $200,000 to $350,000 USD / year
- Startup founding or early product engineering experience, with ownership across product decisions, design, and implementation.
Added 1 day ago
VL
Sales Development Rep -SF Bay Area
vCluster Labs
Remote, United States
- $100,000 to $120,000 USD / year
- Technical Curiosity: You don’t need to be an engineer, but you must be "K8s-curious." You are excited to learn the difference between a pod and a virtual cluster so you can speak with…
Added 1 day ago
VL
Sales Development Rep -NYC
vCluster Labs
Remote, United States
- $100,000 to $120,000 USD / year
- Technical Curiosity: You don’t need to be an engineer, but you must be "K8s-curious." You are excited to learn the difference between a pod and a virtual cluster so you can speak with…
Added 2 days ago
Enterprise Account Executive US West (Remote US West)
n8n
Remote, United States
Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin.…
Added 2 days ago
Enterprise Account Executive US Central (Remote US Central)
n8n
Remote, United States
Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin.…
Added 2 days ago
N
Enterprise Solutions Engineer, SLED
NinjaOne
Remote, United States
- $130,000 to $140,000 USD / year
We’re seeking a sharp, trusted, and highly autonomous Enterprise Solutions Engineer to help drive NinjaOne’s expansion into the State, Local, and Education (SLED) market. This is a builder…
Added 2 days ago
RE
Supplier Quality Auditor
Rosendin Electric, Inc
Remote, United States
- $63,700 to $83,600 USD / year
…brightest in the industry, we want to hear from you. Since our founding over 100+ years ago, Rosendin has been driven to positively impact the communities where we live and work. We are an…
Added 2 days ago
US LBM Lead Software Engineer – Application Development (Pricing)
US LBM Service Co
Remote, United States
…13,000 employees located throughout the country. Since our founding in 2009, we have acquired over 100 companies and have expanded to more than 450 locations serving 37 states. US LBM is a…
Added 2 days ago
C
Founding Forward Deployed Engineer
Clera
Remote, United States
- $180,000 to $250,000 USD / year
Added 2 days ago
Principal Engineer, Agentic AI
Steer
Remote, United States
Previous experience as a founding engineer or in an early-stage startup environment.
Added 2 days ago
Software Engineer (Senior, Staff) - Remote
Replika
Remote, United States
You've been a founding engineer, or early enough somewhere that you’ve built things from zero.
Added 2 days ago
Senior Product Engineer, Mobile - Remote
Replika
Remote, United States
You've been a founding engineer, or early enough somewhere that you built things from zero.
Added 2 days ago
AI Software Engineer
Marvik
Remote, United States
Have been a founder or founding engineer - you know what it means to balance craft, ownership, and speed
Added 2 days ago
Senior Agentic Software Engineer | Poolday
A-Players
Remote, United States
A-Players is helping Poolday hire a Senior Agentic Software Engineer to build the core agent systems behind a next-generation AI-powered video editor. Poolday is creating a new category of…
Added 2 days ago
Applied AI Engineer
Vor Systems
Remote, United States
have proven track records in founding companies (
Added 3 days ago
N
Solutions Engineer
Neo.Tax
Remote, United States
- $170,000 to $190,000 USD / year
This is a founding role - you will be the first solutions engineer ever hired at Neo.Tax! You’ll partner with Sales, Customer Success, Product, and Engineering to lead technical discovery,…
Added 3 days ago
Channel Systems (Sales) Engineer
Forward
Remote, United States
…the impact of every change before it touches production. That founding instinct still defines how we work. We're accurate and evidence-driven, relentless about clarity, and we'd rather be…
Added 3 days ago
2026-11 Senior/Staff Software Engineer
Vectara
Remote, United States
Our founding team includes industry veterans and experts in neural information retrieval and distributed systems from Google. Join us as we pursue our mission to help the world find…
Added 3 days ago
Senior Forward Deployed Engineer (Full-Stack)
Dscout
Remote, United States
Experience working directly with technical customers, as a forward deployed engineer, solutions engineer, or early founding engineer.
Added 3 days ago
Pixis Drones - Senior Account Director
RedPeg Marketing
Remote, United States
We are hiring one of our founding sellers. As Senior Account Director, you will be selling something nobody else in the room has, to brands and agencies that are always looking for the…
Added 3 days ago
TL
AI Infrastructure Engineer [Tooling]
Tessera Labs
Remote, United States
- $200,000 to $230,000 USD / year
…Intelligence. Backed by Foundation Capital and led by a world-class founding team, we build multi-agent AI systems that automate complex business workflows across platforms like SAP,…
Added 3 days ago
TL
AI Infrastructure Engineer [Senior]
Tessera Labs
Remote, United States
- $200,000 to $290,000 USD / year
…Intelligence. Backed by Foundation Capital and led by a world-class founding team, we build multi-agent AI systems that automate complex business workflows across platforms like SAP,…

Keycard

Software Engineer, Security

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Oct 26, 2026

Original job description

ABOUT KEYCARD

At Keycard, we're building identity and access infrastructure for the agent-native era, where software isn't static but a dynamic, constantly changing system of AI agents working on behalf of people and businesses. Keycard gives every agent a verified identity and issues short-lived, task-scoped credentials at runtime, so agents can only do what they were asked to do, and every action is fully auditable. We're backed by a16z, Boldstart, and Acrew, and our founding team built and scaled Snyk, Auth0, HashiCorp, and Heroku.

THE ROLE

We're hiring a staff-level Software Engineer, Security. This is a software engineering role: you'll build and run the security program for what Keycard ships and runs, across our product, our infrastructure, and what we publish, mostly as code and automation. Security is everyone's job here. You'd be the first engineer whose whole job is security, working with engineers who already know the field. It matters because security is what we sell: a hole in our token exchange or policy checks hands a customer's agent access nobody granted. You find those holes early and build the tooling that catches the next ones.

Keycard is a control plane for agents: identity, credential exchange, delegation, policy, and audit. It has to hold even when the agent itself is compromised. Agents are part of how we build, and part of how you'll do this job.

You'll also secure Keycard itself: our cloud accounts, customer-hosted deployments, our pipeline, and secrets. You set the controls and run security response. Platform engineering runs the infrastructure; operations handles audits and customer reviews. You prioritize product and company security work by risk to customers and Keycard.

WHAT YOU'LL DO

SECURE THE PRODUCT

Threat modeling. Trace how an agent gets access, from token exchange through delegation to the per-tool check at our MCP gateway, then attack it: confused deputies, poisoned tool descriptions, prompt injection, issuer and audience mix-ups, token passthrough. Credentials shouldn't leak between hops, and delegated access should end when it expires or is revoked.
Assume compromise. Even a compromised agent should be stopped from escalating privileges or crossing tenants. Document what it can still do with its access.
Design review. Review designs and code across the token service, Cedar policy engine, MCP gateway, CLI, SDKs, and Console, mostly for who can do what and whether zones stay isolated.
Attack with agents. Run scoped agents against an isolated instance and chase the authorization failures they find. Confirmed failures become CI regressions for token exchange, impersonation, or per-tool policy. Example: a harness that follows a delegated credential end to end and checks it never gains scope or lifetime.
Customer reviews. Be the technical voice when customers' security teams review or pentest us; operations runs the process.

SECURE KEYCARD

Cloud and delivery controls. Build agents that find and fix misconfigurations in cloud accounts, pipelines, and published artifacts, with scoped access and human review for their changes. With platform engineering, test isolation between deployments and audited break-glass access.
Our own credentials. Keep them short-lived and narrow. Design service identity and PKI, sign what we ship to customers, and manage dependency risk. You also use Keycard to scope what our own agents can reach.
Incident response. Investigate vulnerabilities and security events, coordinate fixes, and automate detection and routine fixes where you can. You'll also work out with engineering how on-call works for security.

WHAT WE'RE LOOKING FOR

You've shipped and maintained production code, not only security tooling, and you've found and fixed vulnerabilities in applications or identity systems.
You can read unfamiliar code, build an exploit or reproduction, and ship the fix with a regression test.
You know OAuth 2.0 and 2.1, OIDC, and token exchange (RFC 8693), and can describe failures you've seen, like refresh-token misuse.
You can spot the problem in an IAM policy, a network path, or a cloud audit log, even if you've never run cloud infrastructure.
You've built security tooling other engineers adopted that prevents recurring bugs, and you can explain what it catches, what it misses, and when fixes need human review.
Agents at work. You use agents for review, triage, or testing, and know how to check their output and limit their access.

STRONG CANDIDATES MAY ALSO HAVE

Experience in identity infrastructure, developer tools, or multi-tenant SaaS.
Experience with DPoP, Cedar, or SPIFFE/SPIRE.
Hands-on AWS security: IAM, SCPs, logging, infrastructure as code.
Securing agents or MCP servers, including tool permissions and sandboxing.
Public security work: CVEs, bug bounties, write-ups, or OAuth and MCP standards work.

YOUR FIRST 90 DAYS

Month one: map trust boundaries in token exchange and one priority delegation flow, attack them, and compare findings with our risk register. Review the company security setup with platform engineering.
Ship fixes for the findings we agree matter most, each with a CI regression.
Build reusable evidence for customer reviews and a triage process for pentest findings; questionnaires stay with operations.
By day 90: a product and company security roadmap with owners and incident roles, built from the risk register you now own.

WHO WILL LOVE THIS JOB

You'd rather break the product yourself than wait for a customer's red team to.
You'd rather fix a class of bugs once than file the same finding twice.

WHAT WE OFFER

Build at the Frontier: Work every day at the frontier of agent-native systems - shipping, inventing, and iterating on technology that hasn’t been built before. You’ll be given huge autonomy, the opportunity to gain mastery, and the chance to work in a team that holds each other accountable to succeed.
Truly Agent-Native Culture: At Keycard, we don’t just enable others to adopt agents - we use them ourselves to build. You’ll help shape an organization that embeds AI into its foundation as an enduring competitive advantage.
Compensation With Upside: Market-competitive salaries and generous equity packages (4-year vest, 1-year cliff) give you the security to focus on building - and the asymmetric upside of ownership in a company chasing a category-defining mission.
Comprehensive Benefits & Recharge: Health, dental, vision, and paramedical coverage for you and your family, plus 4 weeks vacation, 11 statutory holidays, and 1 volunteer day annually. We encourage at least 2 weeks off each year to fully recharge.
Tools That Keep You Ahead: A new MacBook Pro, a $500 stipend for peripherals, and the best AI tools available so you can work at the forefront of agent-native workflows.
Remote-First Flexibility: We are a remote-first team prioritizing asynchronous collaboration, with hiring focused in North and South America. Work where you’re strongest - we just want the best.

Apply About employer

More about this job

Skills

Security in commercial buildings
Incident response
Identity and access management
AWS
Infrastructure as code

Report this job