AI Security & Control Engineer in London

We are building Watcher, a coding agent security product. We are looking for a security & control expert to help us design better threat models and control protocols against AI adversaries, and improve the effectiveness and security of Watcher.

A security & control expert embedded in the product team with three functions:

• Research: Supporting Apollo's monitoring research with threat modeling, attack design, red‑team, and trajectory analysis (~50%).
• Expert view: Bring a security expert’s view of what security buyers need to make Watcher a better product (~25%).
• Product security: Improve the security posture of Watcher and Apollo's product infrastructure (~25%).

This is truly a “start‑up role” in the sense that you have many responsibilities and have significant say in shaping the direction of the role. It is an individual contributor role but could lead to management responsibilities eventually, if desired.

Security support for research (50%)

• Threat modeling for coding agents: Develop threat models for coding agents under the assumption that they could be misaligned or compromised. This includes near‑term threats, such as AI agents leaking private internal data, and long‑term threats, such as agents sabotaging safety research.
• Failure mode library and literature: Maintain our library of coding agent failure modes and keep it comprehensive, accurate, and current. Stay up to date with the academic and industry literature on coding agent security, AI security, and adjacent fields.
• Attack design for monitor development: Design realistic attack trajectories and example exploits for monitor development and backtesting, working with the research team to ensure monitors are trained and evaluated against credible adversarial behavior.
• Trajectory adjudication: Serve as security adjudicator for flagged trajectories. When monitors flag ambiguous agent behavior, determine whether it represents a genuine attack, a benign‑but‑unusual workflow, or needs deeper investigation.
• Red‑teaming Watcher: Red‑team and improve Watcher's monitors and policies, document findings, and feed them into product improvement.

Security expertise for product (25%)

• Failure mode prioritization and CISO perspective: Understand which failure modes are the biggest problems and prioritise systematically what is most useful to solve for security buyers.
• Customer engagement and landscape awareness: Join customer/prospect calls to understand security needs firsthand and map them onto the threat models and library of failure modes.
• Customer‑facing security artifacts: Own security questionnaire responses, product security whitepapers, and support for customer pen‑tests.

Improving security posture for product (25%)

• Attack surface, infrastructure, and isolation: Own AppSec standards for the product engineering team. Reduce attack surface for all product‑related deployments.
• Data handling and multi‑tenancy: Define security requirements for tenant isolation, encryption at rest/in transit, access controls, and data retention policies for customer coding agent transcripts.
• Product threat model and incident response: Co‑own the product‑specific threat model with the product team lead and keep it up to date.

Development tasks:

• Develop a comprehensive coding agent threat model.
• Improve our database of failure modes.
• Prioritize failure modes that Watcher should cover.
• Design a security roadmap for keeping customer data for Watcher secure.

Must‑haves:

• 5+ years in security roles in a hands‑on technical capacity.
• Engineering mindset – treat security as an engineering problem.
• Direct experience with application, cloud or product security.
• Strong understanding of enterprise security buyer concerns.
• Comfortable working in a small, fast‑moving team.
• Strong written communication.

Strong nice‑to‑haves:

• Experience with AI/ML systems security, LLM security, or AI control research.
• Detection engineering, SOC, or incident analysis experience.
• Familiarity with insider threat programs or frameworks.
• Red‑teaming or offensive security background.

Benefits:

• Market competitive salary, equity, and competitive benefits.
• Flexible work hours and schedule.
• Unlimited vacation and sick leave.
• Comprehensive health, dental and vision insurance.
• Retirement savings with competitive employer matching.
• Paid work trips, including staff retreats, business trips, and relevant conferences.
• A yearly $1,000 (USD) professional development budget.
• Relocation support and visa fees (if applicable).

Time Allocation: Full‑time

Location: In‑person role working out of London or San Francisco office. Flexible working hours and some WFH arrangements.

Visa Sponsorship: We sponsor visas in both the UK and US.

Equality Statement: Apollo Research is an Equal Opportunity Employer. We value diversity and are committed to providing equal opportunities to all.