Sycamore Forge turns hard business processes into working software. Sycamore Guard governs every AI system from request to runtime. Backed by Lightspeed.
About the role
You will secure the product and platform that run Sycamore’s enterprise agents. The surface spans user-facing applications, APIs, agent runtimes, tools and connectors, identity and authorization, untrusted code execution, multi-tenant data, cloud infrastructure, and the software-delivery system itself. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 5-12 years of software or security engineering experience. We will make exceptions for exceptional people in either direction
- Strong software-engineering fundamentals and evidence that you have built, shipped, and operated security-relevant production systems, not only assessed them
- Strong understanding of trust boundaries, least privilege, identity, authorization, secrets, cryptography, isolation, secure software design, and common web and distributed-systems vulnerabilities
- An attacker’s curiosity paired with a builder’s judgment. You can demonstrate how a system fails, but your work is not finished until the safer path works in production
- Practical risk judgment. You distinguish plausible impact from theoretical concern, prioritize the highest-leverage work, and avoid both security theater and reckless shortcuts
- A collaborative approach that raises engineering velocity and ownership rather than turning Security into a late-stage approval queue
More about this role
Sycamore is building the trusted agent operating system for the enterprise. Our platform helps companies build, deploy, and orchestrate agentic apps that take on real operational work, with the security and control large organizations need.
We are a small, engineering-led team working directly with Fortune 500 enterprises. We have raised $65M from Coatue and Lightspeed, along with other investors and industry leaders.
You will secure the product and platform that run Sycamore’s enterprise agents. The surface spans user-facing applications, APIs, agent runtimes, tools and connectors, identity and authorization, untrusted code execution, multi-tenant data, cloud infrastructure, and the software-delivery system itself. This is a hands-on engineering role: you will write production code, build controls and paved paths, review designs, model threats, test systems from an attacker’s perspective, and work with engineers until durable fixes reach production.
Agent systems introduce unusual security problems. A model may consume hostile instructions from a document, invoke tools on a user’s behalf, generate executable code, retain information in memory, and operate across long-running...
Browse similar: Startup jobs · San Francisco Bay Area