[Hiring] Security Analyst @OneSeven Tech

Role Description

We're building out a Model Context Protocol (MCP) infrastructure for a mid-market US software company moving fast into agentic AI. As that system grows — more tools, more agents, more external integrations — the attack surface grows with it. This is a net-new security function: no incumbent, no security team to lean on. You'll own it.

Your primary focus is MCP security:

• JWT-based authentication
• Secrets management
• Prompt injection defense
• Tool-use guardrails as the agentic layer expands

Your secondary focus is the broader application security backlog that the client's IT team and senior developers currently absorb ad hoc. You're not working one problem. You're working two, and you'll need to prioritize between them daily.

This isn't an advisory role. You'll be hands-on keyboard, working directly with the client's technical lead and engineering team to make sure the agentic infrastructure is secure from the inside out.

Qualifications

• Hands-on application security engineering experience — not consulting or auditing only.
• JWT token validation and API key management in production.
• Authentication and authorization design: OAuth 2.0, API key management.
• Secrets management in cloud environments: AWS Secrets Manager, Vault, or equivalent.
• Experience identifying and mitigating prompt injection, tool misuse, and trust boundary issues in AI/LLM systems.
• Comfortable working as the sole security voice on a team.
• Near-native English — daily async communication with a US-based client team and technical lead.

Requirements

• WAF and API Gateway configuration experience.
• Prior exposure to MCP protocol, agentic systems, or LLM-integrated application security.
• Experience with security audits on cloud-native infrastructure: AWS IAM, VPC, Security Groups, CloudTrail, GuardDuty.
• SAST/DAST tooling: Semgrep, Snyk, Burp Suite, or equivalent.
• DevSecOps experience: embedding security gates into CI/CD pipelines.
• Relevant certifications: CEH, OSCP, AWS Security Specialty, or equivalent (not required, but a signal).

What You Will Do

• Own the security posture of the MCP infrastructure: define and implement JWT-based authentication, manage secrets, and establish controls for tool-use and agent interactions.
• Identify and remediate prompt injection risks, unauthorized tool invocations, and privilege escalation vectors in the agentic layer.
• Review and harden AWS infrastructure configurations: IAM policies, VPC rules, secrets exposure, logging and alerting.
• Work through the client's existing application security backlog.
• Partner with the engineering team to review new integrations and MCP components before they ship.
• Document security controls, threat models, and remediation history.

Benefits

• $4000 - $5500/month — paid in USD, bi-weekly via Deel.
• US Eastern Time hours (EST) — Monday to Friday, 9:00 AM–6:00 PM EST.
• Fully Remote — work from anywhere in Latin America.
• Long-term contract — starting with a 6-month contract, with potential to extend.
• Paid PTO — accrual begins after 3-month trial period.
• Referral Program — earn a bonus for referring talent that gets hired.

To Apply

Please send your resume in English. Include the following depending on your role:

• 🔗 LinkedIn Profile URL (required)
• 💻 GitHub repository, security project, or CTF writeups (optional but encouraged)
• ✉️ Cover Letter — tell us about a security vulnerability you found and fixed in a production system, and how you approached it without blocking the team's velocity (optional but encouraged)