Posted 10 Nov 2026 (today) · Job 98412 · Read from the employer's Ashby board, last checked 10 Nov 2026, 15:25 UTC

Engineering Manager, Agent & Product Security

Cursor · New York, New York; Palo Alto, California

Apply on Cursor’s siteAsk about this jobApply opens the employer’s own application. Nothing is sent from here.

What the posting says

Each fact was read from this posting and checked:Statedin the posting, quotedConflictsposted two ways, both shownNot mentionedwe looked; it is not there

Employment typeStated
Full time
Work arrangementStated
Hybrid

Not mentioned in this posting

We read the whole posting. These are not in it. Not a no: ask the recruiter, in your own words.

PayNot mentioned
The posting does not say
ShiftNot mentioned
The posting does not say
ExperienceNot mentioned
The posting does not say
EducationNot mentioned
The posting does not say
Visa sponsorshipNot mentioned
The posting does not say

Requirements, each with its sentence from the posting

These are the employer’s words. The index does not judge whether you meet them.

  • No requirement has been itemized for this posting yet. The employer’s words are in the full posting below.
Read the full posting as the employer wrote it

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

ENGINEERING MANAGER, AGENT & PRODUCT SECURITY

Cursor's agents work inside the codebases of some of the most security-conscious engineering organizations in the world, holding credentials, reading untrusted content, running tools, and shipping changes. Today they act on authority delegated per task. Where we're headed, they'll work more like coworkers: autonomous over long horizons, holding standing responsibilities, initiating work, and collaborating with people and other agents. The security models that the future needs, identity and accountability for autonomous workers, standing authority rather than per-task permission, agent-to-agent trust, oversight that scales with always-on autonomy, mostly don't exist yet.

RESPONSIBILITIES:

  • Chart the path from supervised agents to trusted autonomous ones: define the security primitives that enable agent autonomy, and lead the team that builds them

  • Engineer the isolation that makes Cursor safe to run inside customers' most valuable codebases: tenancy, workspace, secret, and data protections designed for real adversaries

  • Build the authority infrastructure autonomous agents need: identity, scoped permissions, policy enforcement, and secure tool execution, so an agent can hold real responsibility with verifiable limits and full accountability

  • Build customer-facing security controls that are understandable, usable, and strong enough for Cursor's most security-sensitive customers, with crisp success metrics for security outcomes

  • Hire, coach, and grow a high-performing security engineering team while staying technically close to the work: write and review code where useful, and keep execution fast and technically grounded

BASIC QUALIFICATIONS:

  • Experience leading engineering teams that ship production systems with high security, reliability, or platform stakes

PREFERRED SKILLS AND EXPERIENCE:

  • Wants a problem space where much of the answer isn't written down yet

  • Experience leading engineering teams shipping production systems with high security, reliability, or platform stakes, and you want a problem space where much of the answer isn't written down yet

  • Strong product and systems judgment: you can reason from user workflows to architecture, threat models, enforcement points, and operational tradeoffs, and you see security as something that enables product capability, rather than only restricting it

  • Understand modern application security, authorization, tenancy, identity, secrets, data isolation, and secure-by-default platform design

  • Good instincts about AI agents: how they use tools, where authority should come from, how prompt injection and exfiltration show up in practice, and how to build mitigations that hold up against creative adversaries

  • Comfortable operating in ambiguity: you can set strategy where precedent is thin, commit to a direction, and stay close enough to the implementation to know when to change it

  • Able to partner well across product, infrastructure, ML, and customer-facing teams

ADDITIONAL REQUIREMENTS:

  • Onsite role based in New York or Palo Alto

COMPENSATION AND BENEFITS:

The annual compensation range for this role is listed below.

Annual Salary:

$220,000 - $357,000 USD

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

The posting text is reproduced as the employer wrote it; the index adds nothing to it.