Forward Deployed Engineer (Security)

Tracecat builds AI-native security operations software for security teams. The Forward Deployed Engineer (Security) works with customers and founders to design and deploy agents that automate security work, then turns field learnings into reusable product capabilities.

What you'll do:

• Work directly with security teams to design and deploy agentic systems across their security stack
• Build agents that investigate alerts, gather evidence, reason over context, recommend decisions, and trigger approved actions
• Build Python integrations, agent skills, MCP tools, and data pipelines that give agents the context and tools they need
• Design agents for detection and response, cloud findings, identity investigations, vulnerability response, case management, and recurring security operations
• Evaluate agents for accuracy, approvals, auditability, failure modes, and analyst experience
• Work with the founders and product team to turn repeated customer patterns into reusable agents and product capabilities

What they're looking for:

• Security judgment: you understand how teams investigate, prioritize, and respond to risk across cloud, infrastructure, identity, and production environments
• Hands-on experience in security engineering, cloud security, infrastructure security, detection and response, incident response, product security, application security, or a related role
• Strong full-stack development skills and experience building APIs, integrations, data pipelines, internal tools, or production automation
• Product intuition: you can turn one-off customer problems into reusable product primitives
• Customer empathy: you can work with analysts, responders, security engineers, security leaders, and founders without losing the technical thread
• Comfort working in a small team where speed, ownership, and ambiguity are the norm
• Technical craftsmanship: we're an anti-slop AI-pilled company, and security automation should be auditable, testable, and boring when it matters
• Slope over intercept: we value learning velocity, grit, and unapologetically unique personalities
• Prior experience building agents, copilots, MCP servers, tool-calling systems, evals, or sandboxed automation
• Prior experience as a forward deployed engineer, founding engineer, security engineer, incident responder, detection engineer, cloud security engineer, infrastructure security engineer, or security consultant who still writes code
• Experience with production security tooling across SIEM, EDR, cloud, identity, infrastructure, or vulnerability management
• Familiarity with security frameworks, investigation languages, cloud audit logs, IAM, or infrastructure-as-code

Benefits:

• Meaningful equity
• 20 days paid time off every year
• 15 days of remote work flexibility per year
• 100% coverage for health, dental, vision
• Wellness stipend to spend on gym, spa, or whatever keeps you at your best
• Free lunch
• Team offsites