About Outerlimit Outerlimit is one of the most exciting UK startups to join right now. We help organisations stay in control of the AI agents running across their business. We find what's there, set rules for what those agents can do, and give security teams the visibility they need to act. Our customers are deploying agents at scale across Microsoft Copilot Studio, Azure AI Foundry, AWS Bedrock, Anthropic Claude, and beyond. We make sure those agents are known, controlled, and easy to audit. We're building the universal security layer for agentic AI, and we think it's one of the most important problems in technology today. The Role Our Discover capability is the foundation of everything we do. Before you can govern an agent, you need to know it exists: who built it, what tools it can use, where it runs, and whether it's set up safely. Today we keep track of agents, tools, and surfaces across ten platforms using read-only connectors, and we're only getting started. This is a hands-on role with plenty of room to experiment, bringing together cybersecurity, AI platforms, and product engineering. You'll own the research and prototyping that shapes what Outerlimit's Discovery capability can see and tell customers about their agents. You'll work closely with our founders and engineering team, and your ideas will be heard from day one. We don't have a rigid hierarchy or a long approval chain. What we do have is a hard problem, a strong team, and a real commitment to helping you grow fast. The work has two main parts: Connector breadth: finding out what data we can get from the APIs of the platforms our customers use (Microsoft, AWS, Anthropic, and others), and spotting which new signals would be genuinely useful for security and governance. AI Security Posture Management: once we've found an agent, what can its setup tell us about security or quality risks? Think missing scope definitions, weak spots for prompt injection, too many tool permissions, or overlapping topic routing, all checked consistently across a whole organisation. What You'll Do Explore platform APIs: read the API docs for AI platforms (Copilot Studio, Azure AI Foundry, AWS Bedrock, Anthropic, LangChain, OpenAI, Google ADK, and others) and map out what data you can get, what's useful, and what's missing Prototype new connectors: build early versions of discovery connectors that pull in agents, tools, and surfaces from new platforms, using Outerlimit's existing connector setup Design posture checks: research and define security and setup checks we can run on the agents we find (for example, missing safety instructions, too many tool permissions, no human-in-the-loop controls, or exposure to prompt injection) Map findings to frameworks: link the issues we find to MITRE ATLAS, OWASP Top 10 for LLM Applications, and NIST AI RMF so customers understand the risk behind what we show them Write up findings: write clear technical notes on what each platform shares, which checks are possible, and why they matter to customers. These feed straight into the product roadmap Stay current: keep an eye on new agent platforms, new API features, and the changing AI security threat landscape, and share what you learn with the team Shape technical decisions: join architecture reviews, design discussions, and trade-off conversations with the whole team from early on Experiment and learn fast: we move quickly, test ideas, and learn from what doesn't work What We're Looking For Essential A degree in Cybersecurity, Computer Science, Electronic Engineering, Mathematics, Information Security, or a related STEM subject. A real curiosity about AI systems. You find yourself reading about how LLM agents work, what MCP is, and how tool-calling works Excited by the challenge of keeping AI behaviour safe and under control, whether that interest comes from security, systems design, or pure engineering Comfortable reading and working with REST APIs and JSON. You can pick up an API reference and understand what it's telling you Clear communication in writing, in conversation, and in code. You can explain a technical finding clearly to both an engineer and a product manager An analytical mindset. You can look at a set of API fields and reason about what's security-relevant and what isn't Understanding of concepts like prompt injection, jailbreaking, excessive agency, or LLM supply chain risk A structured, curious approach to unclear problems. You ask good questions before jumping to solutions Happy in a small team where ownership is broad and your contributions are genuinely felt Desirable Familiarity with any of: Microsoft Copilot Studio, Azure AI Foundry, AWS Bedrock, Anthropic Claude, OpenAI Assistants Exposure to security frameworks: OWASP, MITRE ATT
Graduate Data Analyst employer: Outerlimit Group Ltd.
Join a forward-thinking company that values your growth and development as an IT Administrator in our dynamic London office. With a strong emphasis on hybrid working, we offer a supportive environment where you can enhance your Microsoft 365 skills through funded certifications and dedicated learning time. Enjoy a competitive salary, generous annual leave, and a culture that prioritises collaboration, innovation, and the well-being of our employees.
