Description

Key Responsibilities 

Agentic AI & Control Plane Security

• Design and implement security control planes for agentic AI systems
• Define runtime authorization boundaries for AI agents, including tool-level access control and least-privilege execution
• Establish policy enforcement points governing agent behavior prior to high-impact actions
• Support human-in-the-loop workflows for sensitive or high-risk AI-initiated actions 

Identity & Access Management

• Design and review identity models for guests, employees, and non-human agent/workload identities
• Implement or advise on OAuth/OIDC-based delegation and short-lived credential strategies
• Ensure end-to-end attribution across user → agent → tool execution chains 

Ecommerce Application Security (Front & Back End)

• Secure guest-facing eCommerce flows including search, personalization, cart, and booking
• Review backend service architectures supporting AI-driven experiences
• Promote agent-safe API patterns such as idempotency, preview/apply, rollback, and rate limiting

Edge, API & Platform Security - DevSecOps, AppSec experience is a must

• Collaborate on edge security controls including WAFs, bot mitigation, and API gateways
• Ensure consistent enforcement from edge to API to service to AI runtime layers –  
• Support secure cloud-native, containerized, and sandboxed deployment patterns(Google, AWS, Azure)

Observability, Logging & Governance

• Define security telemetry and audit requirements for agentic systems
• Support detection and response for runaway agents or excessive autonomy
• Align implementations with enterprise security standards and governance expectations

Required Experience & Skills

Core Experience

• 8+ years of experience in security engineering, application security, or platform security
• Hands-on experience securing large-scale, consumer-facing eCommerce platforms
• Strong foundation in web application and API security 

Identity & Authorization

• Deep understanding of OAuth 2.0/2.1, OIDC, token-based authorization, and service principals
• Experience designing fine-grained least-privilege access models for distributed systems
• Non-Human Identity (NHI) lifecycle management in highly dynamic environments

AI & Emerging Technology

• Experience working with AI-enabled or automation-heavy systems
• Familiarity with risks unique to agentic or autonomous systems
• Ability to reason about non-deterministic execution and enforce deterministic controls
• MCP Security Standards and agent runtime authorization

Platform & Edge Security

• Experience with WAFs, API gateways, and edge security controls
• Familiarity with cloud-native architectures and service-to-service security

Collaboration & Communication

• Ability to work closely with product, platform, AI/ML, and identity teams
• Strong written and verbal communication skills
• Ability to translate complex security concepts into practical guidance

Nice to Have

• Experience with agent frameworks or orchestration systems
• Familiarity with policy-as-code or runtime enforcement models
• Background in fraud, abuse prevention, or financial transaction security
• Experience in regulated or high-availability environments

Key Skills

Education

Bachelor's degree