5 months ago
Base Salary
$200k - $325k/yr
Responsibilities
- Design, implement, and operate Serval’s application security program across services, the agent platform, integrations, and customer-facing surfaces.
- Build, lead, hire, and mentor teams covering product security, secure software development, and vulnerability management.
- Establish secure coding standards, paved-path libraries and frameworks, and scalable security design patterns.
- Build and tune automated security tooling and CI/CD security gates, including SAST, DAST, SCA, secrets scanning, dependency controls, and supply-chain controls.
- Own vulnerability intake, triage, severity assessment, remediation SLAs, tracking, and coordinated disclosure.
- Partner with Engineering, Product, and Infrastructure on authentication, authorization, tenant isolation, data protection, secrets management, and agentic workflow security.
- Address application-security risks in agentic AI systems, including prompt injection, unsafe tool use, data exfiltration, and abuse of autonomous actions.
Requirements
- 10+ years of experience in cybersecurity, with deep expertise in application security, secure software development, and vulnerability management.
- Experience building and leading application/product security, secure-SDLC, and vulnerability-management functions.
- Demonstrated leadership in driving durable improvements to security programs, processes, and teams.
- Strong software engineering fundamentals, including the ability to read, write, and review production code.
- Strong written and verbal communication skills and the ability to influence engineering and product decisions across teams.
- Deep expertise in application security tooling and primitives such as SAST, DAST, SCA, secrets detection, fuzzing, and software supply-chain security.
- Deep expertise in secure cloud-native and distributed-systems architecture.
- Understanding of adversary tradecraft, application-layer exploitation, secure-design guidance, and prioritized remediation.
- Passion for secure software and interest in security challenges unique to AI agents is preferred.
Benefits
- Opportunity to have significant impact on Serval’s product and company.
- Opportunity to build a new AI product offering with support from an experienced team and investors.
- Rapid professional growth in a fast-growing company.
- Culture emphasizing innovation, ownership, accountability, and fun.
Categories
About Serval
Serval builds an AI-native ITSM and automation platform that unifies help desk, access management, and workflow orchestration for enterprises. Its agent-based software turns natural-language requests into end-to-end actions across systems, spanning IT, HR, Finance, Security, Legal, and Engineering; sold as a cloud platform. Founded in 2024 and headquartered in San Francisco, it is privately held and used by organizations such as Fox, Notion, Vercel, Perplexity, and Brex.