Security Engineer

About the role

Manus is a general-purpose AI agent that handles complex tasks end to end, from deep research and data analysis to software development. It is looking for a hands-on Security Engineer with broad security experience to protect its products and global multi-cloud infrastructure. The role covers security architecture, application security, incident response and automation, taking ownership of security improvements from risk assessment through implementation and verification.

Key responsibilities

• Conduct threat modeling and security reviews for new features, services and architectural changes, and work with engineering teams to implement and validate mitigations.
• Develop and maintain incident response playbooks, lead regular exercises, investigate and contain incidents, and drive root cause analysis and remediation.
• Design, implement and operate security controls across cloud environments, including identity and access management, network and workload security, secrets management and security logging.
• Prioritize security risks, define improvement plans and drive implementation with engineering and business teams.
• Build and maintain security tools and automated workflows for detection, assessment and remediation, integrating checks and policy enforcement into development and operations.
• Implement technical controls supporting ISO 27001, ISO 27701 and SOC 2, and provide evidence for audits.
• Run security code reviews, vulnerability assessments and penetration tests, prioritizing findings by exploitability and business impact and verifying fixes.

Required profile

• Bachelor's degree in Computer Science, Computer Engineering or a related technical field, or equivalent practical experience.
• 5+ years of experience designing, implementing and improving security systems at scale.
• Proven ability to handle high-pressure security incidents and perform clear post-incident reviews.
• Preferred: bug bounty contributions, professional certifications (CISSP, CISA, OSCP, AWS/GCP/Azure security certs), experience with AI tools, personal projects, international distributed-team experience, and experience securing AI applications or agent systems.

Required skills

• Strong cloud security expertise with hands-on experience in at least two major cloud platforms (AWS, GCP, Azure) and native security tools such as AWS Security Hub and GCP Security Command Center.
• Linux system security, including hardening, log analysis, intrusion detection and incident response.
• Web and application security, with penetration testing and code audit experience.
• Experience building security tools or automation scripts in Python, Go or similar languages.

What we offer

• Work with a fast-paced team on frontier AI agents.
• Share incentive plan with equity participation.
• Unlimited Manus tokens for experimentation and productivity.