Security Analyst

• Own the security posture of the MCP infrastructure: define and implement JWT-based authentication, manage secrets, and establish controls for tool-use and agent interactions
• Identify and remediate prompt injection risks, unauthorized tool invocations, and privilege escalation vectors in the agentic layer
• Review and harden AWS infrastructure configurations: IAM policies, VPC rules, secrets exposure, logging and alerting
• Work through the client's existing application security backlog — issues currently handled ad hoc by IT and senior devs that need a permanent, focused owner
• Partner with the engineering team to review new integrations and MCP components before they ship, and establish a repeatable pre-ship security review process
• Document security controls, threat models, and remediation history so the client team can operate independently over time

See all jobs on JobTailor

Security Analyst – MCP & Application