Lead the design and implementation of agentic application-security workflows across the SDLC. Build AI agents for threat modeling, secure coding, CI/CD validation, testing, release risk assessment, and production feedback. Define security context models, guardrails, decision rules, human-review requirements, and escalation paths. Integrate workflows with engineering platforms, lead engineers across teams, validate outputs with security experts, and continuously improve agent quality, observability, and production readiness.
We are hiring a Staff AI Engineer (Lead) to design and drive an ambitious agentic security workflows covering the full SDLC — from requirements, threat modeling, secure coding, CI/CD validation, security testing, release risk assessment, and production feedback loops.
This role focuses on building reliable AI agent systems that understand product security context, support SDLC validation, improve release readiness, and help engineering teams adopt secure AI-assisted development practices. The ideal candidate combines AI agent engineering, backend/platform experience, and cross-team technical leadership.
Why Money Forward?
- Join Money Forward at a major strategic turning point as the company shifts from “cloud” to “AI” and advances AX (AI Transformation) beyond traditional DX.
- Help build the foundation for AI agents and “digital workers” that can autonomously perform back-office tasks across Money Forward products.
- Own greenfield architecture for agentic security workflows that directly support the company’s AI strategy, product trust, and secure AI-driven development.
- Work on a rare intersection of agentic AI, application security, and cross-team engineering leadership, shaping reusable standards, guardrails, and implementation patterns across product teams.
- Contribute to Money Forward’s ambition to become Japan’s No. 1 back-office AI company by enabling safer, faster, and more reliable AI-powered value creation.
- Help shape one of the company’s most advanced agentic AI initiatives: a multi-agent security workflow designed to support the full software development lifecycle, while keeping human review, safety boundaries, and release governance in place.
Responsibilities
- Design end-to-end agentic security workflows for SDLC validation, patch management, proactive testing, risk reporting, and release gates.
- Own the product security context model, including architecture, data sensitivity, authentication/RBAC, credential and PII handling, logging touchpoints, release tier, and critical product flows.
- Define agent decision rules, including advisory behavior, human-review requirements, release-blocking criteria, risk thresholds, and escalation paths.
- Design and implement agent guardrails such as least-privilege access, prompt-injection handling, safe tool execution, audit logging, rollback, and kill-switch mechanisms.
- Build and maintain AI agent workflows using LLMs, context engineering, tool integrations, orchestration, harness design, loop engineering, and evaluation pipelines.
- Validate agent outputs with security experts before rules are trusted for production use.
- Lead application engineers across divisions and translate agentic workflow designs into stack-specific implementation patterns.
- Work with SRE/PRE on CI/CD integration, GitHub/CircleCI workflows, Datadog checks, staging safeguards, and release-gate mechanics.
- Coordinate with QA, privacy, and security specialists on regression validation, release readiness, PII handling, and secure coding rules.
- Own false-positive tuning, rule-change backlog, and continuous improvement of agent quality.
Requirements
Requirements
- Bachelor’s degree or higher in Computer Science, Software Engineering, or a related technical field.
- Strong experience with Python or JavaScript building LLM-based applications and AI agents, with hands-on experience in LLM tooling, frameworks, platforms, RAG and evals.
- Strong understanding of context engineering, instruction design, prompt hardening, tool boundaries, harness design, loop engineering, and agent evaluation.
- Ability to design production-ready agent workflows with clear inputs, outputs, failure modes, human-review points, and escalation rules.
- Experience with CI/CD, observability, logging, monitoring, and production-readiness practices.
- Ability to lead 3–5 engineers across teams without direct authority.
- Strong problem-solving skills
- Strong communication skills
- Experience with AI agent frameworks such as LangGraph, LangChain, OpenAI Agents SDK, or equivalent.
- Experience integrating AI workflows into GitHub, CircleCI, Datadog, or similar engineering platforms.
- Experience creating reusable engineering standards, templates, checklists, and enablement materials.
- Working knowledge of application security concepts such as threat modeling, OWASP, secure coding, secrets handling, PII handling, and release risk assessment; or proven ability to work closely with security experts and convert their knowledge into agent rules and checklists.
- Working familiarity with additional stacks used across product teams, such as Ruby/Rails, Go, Java, React, or Vue.
- Ability to work effectively in a rapid, iterative development environment with a high degree of autonomy.
- Japanese: Business-level or higher preferred. (Optional)
- English: Ability to read and write technical documentation and collaborate with engineering teams.
Similar Jobs
Cloud • Fintech • Software
Lead the design and delivery of AI context engineering and evaluation harness workstreams. Develop RAG, memory, token-management, ontology, MCP integration, sandboxing, orchestration, validation, and evaluation standards. Support pilot teams, define integrations with GitHub, Notion, and Slack, build YAML-based knowledge models and repo-native harness prototypes, and translate pilot evidence into company-wide best practices and technical standards.
Top Skills:
Agent PlatformsCiContext EngineeringDeepevalGitGitHybrid SearchIndexing PipelinesMarkdownMemory ArchitectureModel Context Protocol (Mcp)NotionPromptfooRagRetrieval PipelinesSchemasSlackToken ManagementYaml
Security • Cybersecurity
Own global revenue recognition under ASC 606 and accounting processes including commissions, COGS, and leases. Review tax provisions, returns, transfer pricing, and subsidiary filings; support external audits and cross-functional reporting. Lead accounting projects, process improvements, and AI-driven workflow automation. Requires a CA, Big 4 high-tech experience, strong US GAAP and revenue recognition knowledge, ERP experience, advanced Excel skills, and excellent communication.
Top Skills:
Ai Automation ToolsAsc 340-40Asc 606ExcelMS OfficeNetSuiteUs Gaap
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Perform software verification and validation for embedded aerospace platform components. Develop test plans, conduct requirement- and scenario-based testing, execute change impact analyses, resolve technical issues, support audits, and collaborate with stakeholders. The role requires embedded C/C++ and RTOS expertise, emulator and debugger experience, testing tools, technical leadership, and stakeholder management.
Top Skills:
BitbucketC++DeosDoors NgEmbedded CIcdJIRALauterbachLdraLinuxRtosVectorcast/Cover
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
