Beazley Security is building a new managed service through its MDR Operations Team, focused on visibility, control, and response for agent activity running on client endpoints and servers. As the first Agentic Security Engineer, you will help bring the platform to life, enforce AI security policies at runtime, and shape how detections and analyst workflows scale with the service.
Role context
You will report directly to the Director of MDR Operations, working across MDR analysts, Product, Software Engineering, Professional Services, and vendor partners. The work combines platform engineering, policy design, detection and routing logic, and analyst enablement, as the AIDR service expands alongside client AI adoption.
Responsibilities
- Deploy, configure, and maintain the AI security platforms behind the Managed AI Detection and Response solution, including rolling out tooling through MDM or EDR and establishing initial enforcement policies.
- Manage endpoint enforcement actions executed via the platform agent, including software removal and removal of MCP server, shell, and database integrations, using per-client pre-authorization and exclusion lists to avoid impacting business-critical tooling.
- Monitor platform health, coverage, webhook delivery, and enforcement-action lifecycle state to prevent detection and reporting gaps.
- Translate client AI acceptable use policies, data handling requirements, and risk appetite into enforceable platform configurations under an “allow, ask, and deny” enforcement model.
- Build and maintain standard enforcement baselines by client segment, including exclusion lists and pre-authorized response actions.
- Tune client deployments and environment suppressions as usage patterns and feature adoption change.
- Document policy changes so they are reviewed and easy to understand.
- Develop and refine detection and routing logic that sends real threats to analysts for investigation while routing other activity to scheduled client reporting.
- Automate client onboarding, baseline policy deployment, enrichment, reporting, and common response actions using Python, platform APIs, and agentic tools such as Claude Code.
- Act as the MDR team subject matter expert on AI risk, AI tooling, and the platform stack behind AIDR.
- Run and maintain analyst runbooks, promotion-trigger guidance, and training materials for analyst queue handling.
- Review analyst escalations with peers to identify improvement areas and where additional guidance or training is needed.
- Track the AI threat landscape using frameworks mapped to the service, including MITRE ATT&CK, MITRE ATLAS, the OWASP Agentic Top 10, and the OWASP Top 10 for LLM Applications, then translate findings into service capabilities.
- Partner with MDR leadership and Product Engineering on the AIDR roadmap, helping design the service as it grows.
Requirements
- 3+ years of experience in cybersecurity, including at least 1 year in an engineering detection engineering or automation role, preferably in an MDR, MSSP, or security product company.
- Hands-on experience with generative AI tools, AI agents, and extensions such as hooks, skills, plugins, and MCP servers, with a deep understanding of risks including misalignment, unexpected behavior, prompt injection, credential exposure, and malicious skills or plugins.
- Hands-on experience configuring policy-driven security platforms such as SIEM, EDR, SOAR, DLP, CASB/SSE, or browser and endpoint agent security tools.
- Proficiency with scripting or programming languages such as Python or PowerShell, and experience with REST APIs and webhook-based integrations.
- Strong written and verbal communication skills, including explaining technical risk clearly to analysts and clients.
- Experience mentoring, training, or reviewing analysts or junior engineers.
Technologies
- Claude Code
- Python
- PowerShell
- REST APIs
- Webhook-based integrations
- SIEM
- EDR
- SOAR
- DLP
- CASB/SSE
- MDM
- MITRE ATT&CK
- MITRE ATLAS
- OWASP Agentic Top 10
- OWASP Top 10 for LLM Applications
- Hooks, skills, plugins, MCP servers
Benefits
- Competitive salary and bonus.
- Flexible working arrangements.
- Generous leave policies, including 3 months paid parental.
- 100% of employee-only insurance premiums covered (healthcare, dental, and vision).
- Up to 5% matched 401k contribution.
- Opportunities for career advancement and ongoing training.
- Participation in industry conferences and events.
Preferred qualifications
- Experience with AI security and agent runtime control.
- Familiarity with frameworks including OWASP Top 10 for LLM Applications, the OWASP Agentic Top 10, MITRE ATT&CK, MITRE ATLAS, NIST AI RMF, or ISO/IEC 42001.
- Experience administering or securing enterprise AI assistants, LLM platforms, or agent frameworks.
- Experience with enterprise EDR, SIEM, and cloud productivity security platforms.
- Relevant security, cloud security, or AI governance certifications such as Security+, CCSP, or IAPP AIGP.
Location: West Hartford, CT (onsite)
Minimum experience: 3 years
