Engineering Manager, Agent & Product Security

New York, NY · Remotefull timeRemote

Apply on Employer Site

senior

$220k–$357k

H1B: no

Cursor Engineering Manager role at Cursor focused on advancing agent and product security by leading the development of security primitives for autonomous agents. Responsible for building isolation, authority infrastructure, and customer-facing security controls while managing a high-performing security engineering team.

Responsibilities

Chart the path from supervised agents to trusted autonomous ones: define the security primitives that enable agent autonomy, and lead the team that builds them
Engineer the isolation that makes Cursor safe to run inside customers' most valuable codebases: tenancy, workspace, secret, and data protections designed for real adversaries
Build the authority infrastructure autonomous agents need: identity, scoped permissions, policy enforcement, and secure tool execution, so an agent can hold real responsibility with verifiable limits and full accountability
Build customer-facing security controls that are understandable, usable, and strong enough for Cursor's most security-sensitive customers, with crisp success metrics for security outcomes
Hire, coach, and grow a high-performing security engineering team while staying technically close to the work: write and review code where useful, and keep execution fast and technically grounded

Qualification

Strong product and systems judgmentUnderstand modern application securityGood instincts about AI agentsComfortable operating in ambiguityAble to partner well across productADDITIONAL REQUIREMENTS

Required

Experience leading engineering teams that ship production systems with high security, reliability, or platform stakes

Preferred

Wants a problem space where much of the answer isn't written down yet
Experience leading engineering teams shipping production systems with high security, reliability, or platform stakes, and you want a problem space where much of the answer isn't written down yet
Strong product and systems judgment: you can reason from user workflows to architecture, threat models, enforcement points, and operational tradeoffs, and you see security as something that enables product capability, rather than only restricting it
Understand modern application security, authorization, tenancy, identity, secrets, data isolation, and secure-by-default platform design
Good instincts about AI agents: how they use tools, where authority should come from, how prompt injection and exfiltration show up in practice, and how to build mitigations that hold up against creative adversaries
Comfortable operating in ambiguity: you can set strategy where precedent is thin, commit to a direction, and stay close enough to the implementation to know when to change it
Able to partner well across product, infrastructure, ML, and customer-facing teams
ADDITIONAL REQUIREMENTS: