Product Security Engineer (Founding team)

Work at a Startup Startup Jobs Education How it Works Log In Product Security Engineer (Founding team) at Aglide(S23) £80K - £150K GBP  •  0.25% - 0.75% Connect every disconnected app to your SSO. London, England, GB / San Francisco, CA, US Full-time US citizenship/visa not required 1+ years Apply now About the role Aglide's browser agent platform is trusted by household-name fintechs and global enterprises to automate and secure the applications their employees depend on most. We've raised over $3.5M to go after this problem, and every day our platform is running thousands of mission-critical workflows. Our founding engineers take on high-ownership roles, working directly with customers to invent new ways to securely and reliably automate web tasks - shaping product direction and building the core infrastructure for a category that's still being invented. What we do Aglide combines an on-device browser agent and a browser extension to autonomously run web-based tasks inside our customers’ work applications. Today, it’s used for two key workflows: User login: Automating user sign-in to work accounts to give security teams visibility and policy enforcement. Lifecycle: Completing admin tasks inside applications (e.g., creating users) to save time, reduce human error, and tighten access control. Our platform lets non-technical users configure these workflows for any application. We are working with companies ranging from decacorn financial services scale-ups to public insurance companies. Their employees depend on Aglide to access mission-critical applications - from everyday SaaS tools to corporate bank accounts; while their security teams count on it to maintain compliance and defend against attackers - including, at times, state-sponsored threats. What you’ll be building End-to-end encrypted infrastructure: Owning and evolving the systems that keep sensitive customer data secure — across our backend, on-device environment, and browser extension. Security architecture and threat modelling: Identifying vulnerabilities across the stack and designing systems that are resilient against real-world attack vectors, including those from sophisticated and state-sponsored actors. Compliance and audit tooling: Building the internal controls and logging infrastructure that support SOC 2 and other compliance frameworks our enterprise customers require. Platform controls and analytics: Giving customers more visibility and control over how their automations run — and giving our team the observability to detect and respond to anomalies. Secure product features: Contributing full-stack across our dashboard, desktop app, and backend to ship features that embed security into the product experience, not just the infrastructure. How you’ll build it Independently and confidently: You’ll have significant ownership and autonomy - meaningfully shaping our priorities through the roadmap you influence and the problems you choose to solve. Inventing the playbook: We're one of the few companies running browser-using agents for mission-critical work - and that comes with novel security challenges. You’ll help us maintain the reputation we have for our commitment to security in every product decision. Across the stack: You’ll ship by contributing across everything - the dashboard, desktop app, backend services, and IaC configurations - with a security lens at every layer. With high commitment: You’ll go from problem identified to solution shipped in days, even if it means working long nights and weekends. The skills we’re looking for Must-have: 3+ years software experience: Looking for people who have built production software for real users, with meaningful exposure to security-sensitive environments. Strong security fundamentals: A deep understanding of applied cryptography, zero-trust principles, secure software development, and common vulnerability classes (e.g. OWASP Top 10). Excellent debugging and systems thinking: Browser automation is messy, and our workflows run on end-user devices with end-to-end encrypted data - tracing a security