About the company
Cursor is the AI code editor. Our agents work inside the codebases of some of the most security-conscious engineering organizations in the world. We are building the security models for autonomous agents.
Responsibilities
- Chart the path from supervised agents to trusted autonomous ones: define the security primitives that enable agent autonomy, and lead the team that builds them.
- Engineer the isolation that makes Cursor safe to run inside customers’ most valuable codebases: tenancy, workspace, secret, and data protections designed for real adversaries.
- Build the authority infrastructure autonomous agents need: identity, scoped permissions, policy enforcement, and secure tool execution, so an agent can hold real responsibility with verifiable limits and full accountability.
- Build customer-facing security controls that are understandable, usable, and strong enough for Cursor’s most security-sensitive customers, with crisp success metrics for security outcomes.
- Hire, coach, and grow a high-performing security engineering team while staying technically close to the work: write and review code where useful, and keep execution fast and technically grounded.
Requirements
- Led engineering teams shipping production systems with high security, reliability, or platform stakes.
- Strong product and systems judgment: can reason from user workflows to architecture, threat models, enforcement points, and operational tradeoffs.
- Understand modern application security, authorization, tenancy, identity, secrets, data isolation, and secure-by-default platform design.
- Good instincts about AI agents: how they use tools, where authority should come from, how prompt injection and exfiltration show up in practice, and how to build mitigations that hold up against creative adversaries.
- Comfortable operating in ambiguity: can set strategy where precedent is thin, commit to a direction, and stay close enough to the implementation to know when to change it.
- Can partner well across product, infrastructure, ML, and customer-facing teams.