Lead the design and implementation of agentic application-security workflows across the SDLC. Build AI agents for threat modeling, secure coding, CI/CD validation, testing, release risk assessment, and production feedback. Define security context models, guardrails, decision rules, human-review requirements, and escalation paths. Integrate workflows with engineering platforms, lead engineers across teams, validate outputs with security experts, and continuously improve agent quality, observability, and production readiness.
We are hiring a Staff AI Engineer (Lead) to design and drive an ambitious agentic security workflows covering the full SDLC — from requirements, threat modeling, secure coding, CI/CD validation, security testing, release risk assessment, and production feedback loops.
This role focuses on building reliable AI agent systems that understand product security context, support SDLC validation, improve release readiness, and help engineering teams adopt secure AI-assisted development practices. The ideal candidate combines AI agent engineering, backend/platform experience, and cross-team technical leadership.
Why Money Forward?
- Join Money Forward at a major strategic turning point as the company shifts from “cloud” to “AI” and advances AX (AI Transformation) beyond traditional DX.
- Help build the foundation for AI agents and “digital workers” that can autonomously perform back-office tasks across Money Forward products.
- Own greenfield architecture for agentic security workflows that directly support the company’s AI strategy, product trust, and secure AI-driven development.
- Work on a rare intersection of agentic AI, application security, and cross-team engineering leadership, shaping reusable standards, guardrails, and implementation patterns across product teams.
- Contribute to Money Forward’s ambition to become Japan’s No. 1 back-office AI company by enabling safer, faster, and more reliable AI-powered value creation.
- Help shape one of the company’s most advanced agentic AI initiatives: a multi-agent security workflow designed to support the full software development lifecycle, while keeping human review, safety boundaries, and release governance in place.
Responsibilities
- Design end-to-end agentic security workflows for SDLC validation, patch management, proactive testing, risk reporting, and release gates.
- Own the product security context model, including architecture, data sensitivity, authentication/RBAC, credential and PII handling, logging touchpoints, release tier, and critical product flows.
- Define agent decision rules, including advisory behavior, human-review requirements, release-blocking criteria, risk thresholds, and escalation paths.
- Design and implement agent guardrails such as least-privilege access, prompt-injection handling, safe tool execution, audit logging, rollback, and kill-switch mechanisms.
- Build and maintain AI agent workflows using LLMs, context engineering, tool integrations, orchestration, harness design, loop engineering, and evaluation pipelines.
- Validate agent outputs with security experts before rules are trusted for production use.
- Lead application engineers across divisions and translate agentic workflow designs into stack-specific implementation patterns.
- Work with SRE/PRE on CI/CD integration, GitHub/CircleCI workflows, Datadog checks, staging safeguards, and release-gate mechanics.
- Coordinate with QA, privacy, and security specialists on regression validation, release readiness, PII handling, and secure coding rules.
- Own false-positive tuning, rule-change backlog, and continuous improvement of agent quality.
Requirements
Requirements
- Bachelor’s degree or higher in Computer Science, Software Engineering, or a related technical field.
- Strong experience with Python or JavaScript building LLM-based applications and AI agents, with hands-on experience in LLM tooling, frameworks, platforms, RAG and evals.
- Strong understanding of context engineering, instruction design, prompt hardening, tool boundaries, harness design, loop engineering, and agent evaluation.
- Ability to design production-ready agent workflows with clear inputs, outputs, failure modes, human-review points, and escalation rules.
- Experience with CI/CD, observability, logging, monitoring, and production-readiness practices.
- Ability to lead 3–5 engineers across teams without direct authority.
- Strong problem-solving skills
- Strong communication skills
- Experience with AI agent frameworks such as LangGraph, LangChain, OpenAI Agents SDK, or equivalent.
- Experience integrating AI workflows into GitHub, CircleCI, Datadog, or similar engineering platforms.
- Experience creating reusable engineering standards, templates, checklists, and enablement materials.
- Working knowledge of application security concepts such as threat modeling, OWASP, secure coding, secrets handling, PII handling, and release risk assessment; or proven ability to work closely with security experts and convert their knowledge into agent rules and checklists.
- Working familiarity with additional stacks used across product teams, such as Ruby/Rails, Go, Java, React, or Vue.
- Ability to work effectively in a rapid, iterative development environment with a high degree of autonomy.
- Japanese: Business-level or higher preferred. (Optional)
- English: Ability to read and write technical documentation and collaborate with engineering teams.
Similar Jobs
Cloud • Fintech • Software
Lead the design and delivery of AI context engineering and evaluation harness workstreams. Develop RAG, memory, token-management, ontology, MCP integration, sandboxing, orchestration, validation, and evaluation standards. Support pilot teams, define integrations with GitHub, Notion, and Slack, build YAML-based knowledge models and repo-native harness prototypes, and translate pilot evidence into company-wide best practices and technical standards.
Top Skills:
Agent PlatformsCiContext EngineeringDeepevalGitGitHybrid SearchIndexing PipelinesMarkdownMemory ArchitectureModel Context Protocol (Mcp)NotionPromptfooRagRetrieval PipelinesSchemasSlackToken ManagementYaml
Events • Food • Travel • Hospitality • Hotels & Resorts
Provides hands-on training across hotel departments, including front office, guest services, housekeeping, and operations. Supports check-ins and check-outs, guest inquiries, room allocations, payments, guest records, event coordination, and complaint resolution. Collaborates with teams to deliver exceptional hospitality while learning hotel procedures, service standards, and property management systems. Requires strong communication, flexibility, English proficiency, basic computer skills, and availability for evenings, weekends, and holidays.
Top Skills:
Property Management Systems (Pms)
Cloud • Security • Software • Cybersecurity • Automation
Drive enterprise sales across Mumbai, focusing on BFSI institutions, conglomerates, and large enterprises. Responsibilities include prospecting, pipeline generation, full-cycle deal management, account planning, executive stakeholder engagement, negotiations, forecasting, and post-sales expansion. The role requires positioning GitLab’s DevSecOps platform against security, compliance, regulatory, data residency, and modernization priorities while coordinating Solutions Architects, Customer Success, partners, and internal teams.
Top Skills:
Ci/CdCloud InfrastructureDevsecopsGitlabHybrid CloudPrivate CloudSaaS
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
