Senior Software Engineer - Application Security
Emergent Labs is hiring a Senior Software Engineer - Application Security in Bengaluru, India. Level rates it ; you can apply on Emergent Labs.
Level's read on this job
- Level rates this role Builds AI ●●●●: the job is building AI systems.
- The posting mentions Python, JavaScript and TypeScript among its tools and skills.
- Level classes it as a senior role.
- Emergent Labs has 52 other open roles on Level.
AI in this role
Senior Application Security Engineer secures infrastructure, guardrails, and validation layers for autonomous AI-driven coding agents.
Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications.
Since our public launch, we've crossed $130M in ARR and grown to over 10M users across 190+ countries, who have built 12M+ applications on Emergent. We're backed by Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.
We're solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by repeat founders, Olympiad medalists, IIT & IIM alumni, and leaders from Google, Amazon, and Dropbox.
We're hiring builders who want ownership, speed, and impact at global scale.
The Role:
Emergent runs a massive, multi-tenant, AI-driven execution environment where code is generated and executed continuously. You will secure the infrastructure that powers autonomous software creation.
What You'll Do:
What You’ll Do
Secure AI-generated applications at scale
- Define security patterns for applications generated by AI agents
- Enforce guardrails across auth, data access, APIs, and business logic
- Build frameworks to ensure secure-by-default app generation
Design “secure generation” systems
- Work directly with AI/agent pipelines to prevent insecure code from being produced
- Build validation layers for generated code (static + semantic)
- Detect prompt injection and adversarial input patterns
Own application threat modeling
- Identify vulnerabilities in dynamic app creation flows
- Analyze risks in multi-tenant user-generated environments
- Build reusable threat models for agent-driven systems
Build developer-facing security primitives
- Auth systems, permission frameworks, secure SDKs
- Secure API gateways and rate limiting
- Input/output validation layers for LLM-driven flows
Red team AI-generated apps
- Break applications generated by Emergent agents
- Identify systemic weaknesses vs one-off bugs
- Feed learnings back into generation systems
What We’re Looking For
- 5–10+ years in Application Security
- Strong coding ability (Python, JS/TS, backend systems)
- Deep understanding of:
- OWASP Top 10
- Auth & session management
- API security
- Injection & sandbox escape vectors
- Experience working closely with product/engineering teams
What Sets You Apart
- You think in systems, not vulnerabilities
- You want to prevent insecure code from ever existing
- Experience with:
- AI/LLM systems
- Prompt injection & output validation
- Secure code generation systems
Why Emergent
- Build security for AI systems that build software
- Operate at global scale (millions of apps, millions of users)
- Work directly with founders and core engineering
- Solve problems that don’t exist anywhere else yet
How we rate this
Senior Software Engineer - Application Security at Emergent Labs rates 90 out of 100 for how much of the daily work is AI. That makes it Builds AI (AI Level 4 of 4). The level is about AI in the job, not seniority.
Builds AI. The job is building AI systems.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- How do you decide when an AI agent can act on its own versus asking for approval first?
- Tell me about a project where application security was part of your work. What did you do?
- Tell me about a project where security was part of your work. What did you do?
- Tell me about a project where threat modeling was part of your work. What did you do?
- Tell me about a project where llm security was part of your work. What did you do?
Adapt your resume
- List these exact terms on your resume: AI agents, Application Security, Security, Threat Modeling, and LLM Security. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
- Lead with what you built, trained or shipped. This role is judged on the AI system itself, not the tools around it.
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. You get your review by email within 24 hours.
Get new security jobs (Builds AI ●●●●) by email
One email a week with the new security jobs (Builds AI ●●●●), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Security roles that build AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step