Autonomous security agents on a live knowledge graph of your code, cloud, and vendors. Tolmo finds vulnerabilities, misconfigurations, and threats, then ships the fix. Backed by Accel and Y Combinator.
About the role
Our product is only as good as our agents' judgment. As a Research Engineer on AI Security, you make that judgment better and measurably so: how our agents plan, reason over a graph of a customer's production system, decide what is worth testing, and know when a finding is real. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Hands-on experience building, evaluating, or improving LLM-based agents or systems in production
- A rigorous, empirical approach: you design experiments, distrust single anecdotes, and let the evals decide
- Strong engineering skills: you write production-quality code (Python, TypeScript, or Go) and build tools other people rely on
- A working understanding of security, or a strong drive to learn it fast: how real systems are attacked and how findings are validated
- Familiarity with LLM security risks such as prompt injection, jailbreaks, and tool misuse
- You build with AI coding agents daily (e.g., Claude Code, Cursor) and have opinions about what makes them reliable
More about this role
Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed.
We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding.
We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started.
Our product is only as good as our agents' judgment. As a Research Engineer on AI Security, you make that judgment better and measurably so: how our agents plan, reason over a...
Browse similar: AI jobs · AI startup jobs · Startup jobs · Remote jobs · San Francisco Bay Area