Foresite

Architect and deploy autonomous agent networks and integrate agentic capabilities into secure multi-tenant web applications. | 5+ years software engineering with expertise in LLM integration, RAG architectures, agent frameworks, React, TypeScript, and cloud-native databases. | Foresite is looking for a Senior Applied AI Engineer to shape how state-of-the-art AI and autonomous agents power our Managed Security Services Provider (MSSP) platform. We are building the next generation of AI-driven security operations, transforming how threat detection, investigation, and response are conducted. In this role, you will move beyond basic API integrations to build and deploy complex, multi-agent AI systems. You will leverage the latest model architectures, agent harnesses, Agent Development Kits (ADK), Agent-to-Agent (A2A) interaction patterns, and emerging frameworks. While our ecosystem is anchored on Google Cloud Platform (GCP), we value deep hands-on expertise across model ecosystems (OpenAI, Claude, Gemini, Llama, Mistral) and cloud environments. What You'll Do Build Complex Agentic Workflows: Architect, harness, and deploy production-grade autonomous agent networks using ADK, A2A communication, and state-of-the-art agentic frameworks to automate multi-step security triage and investigation workflows. End-to-End AI Architecture: Own model selection, prompt engineering/harnessing, context retrieval (RAG pipelines), agent orchestration topologies, and automated evaluation/observability frameworks. Production Optimization: Manage context windows, optimize token budgets, implement prompt caching/pruning, and aggressively minimize latency across real-time RAG, function calling and other such multi-agent interaction loops. Full-Stack Integration: Collaborate with engineering teams to embed agentic capabilities directly into our customer- and analyst-facing web applications built on React 18/19, TypeScript, PostgreSQL, and Firestore. Secure Multi-Tenancy: Design secure AI architectures enforcing strict customer data isolation, zero-leakage context management, and enterprise-grade privacy controls. Technical Leadership & Mentorship: Establish standards for building with LLMs, agent evaluation pipelines, and elevate AI engineering practices across the organization. Who you are: Engineering Principles: 5+ years of software engineering experience with strong fundamentals (you write production code, not just notebooks). AI/LLM Integration: Deep, practical experience using Agent Development Kit. You should have a proven track record of integrating LLMs into production environments - prompt engineering, context management, RAG architectures, agent frameworks, evaluation and observability. The Modern Stack: You are deeply proficient in React 18/19 and TypeScript. You are comfortable with React Router v7 and modern routing patterns. Data & Backend: You are comfortable designing schemas, writing queries, and reasoning about performance across PostgreSQL and Firestore. You feel at home with modern ORMs and use runtime validation to enforce data integrity at system boundaries. Security: Experience designing secure multi-tenant AI architectures — you understand how to build LLM integrations that enforce strict data isolation between customers. System Design: Strong understanding of scalable and highly available cloud-native system design. Product Focused: Experience working closely with product teams to ship user-facing features. Senior & Core Expectations: As a Senior Engineer on our team, you are expected to demonstrate high autonomy and depth across the following pillars: Production Ownership: A proven track record of owning AI/LLM solutions from initial concept and prototyping through full rollout, monitoring, and iteration in a live production environment. Model & Framework Mastery: Hands-on experience deploying modern LLMs, agent frameworks, Agent Development Kits (ADK), or Agent-to-Agent (A2A) protocols to production. Cost & Latency Management: Demonstrated proficiency in balancing performance, token usage, context window constraints, and latency within complex RAG or multi-agent architectures. The Modern Stack: High hands-on proficiency writing production code, designing database schemas, and reasoning about performance across React 18/19, TypeScript, PostgreSQL, and Firestore. Security & Multi-Tenancy: Experience designing secure multi-tenant AI systems where strict customer data separation and compliance boundary enforcement are required. Who you are: Core Software Fundamentals: 5+ years of software engineering experience with robust fundamentals (you write clean, tested, maintainable production code, not just Jupyter notebooks). Applied AI & Agentic Expertise: Practical experience with prompt harnessing, RAG architectures, multi-agent orchestration, function calling/tool use, evaluation frameworks, and LLM observability. Cloud & Model Versatility: Experience in cloud-native AI environments (Vertex AI/GCP preferred, but multi-cloud background in AWS/Azure is equally welcome). Broad familiarity with leading closed-source and open-source models (Claude, Gemini, GPT-4, Llama, Mistral). Data Engineering Competency: Comfortable designing schemas, writing queries, and managing ORM data integrity across relational (PostgreSQL) and document (Firestore) databases. Product-Minded Engineer: Passionate about partnering with product managers and security analysts to deliver features that create true operational leverage. Nice to have: Infrastructure as Code (IaC): Proficiency with Terraform or similar tools for cloud platform provisioning and orchestration. Cloud Security Ecosystem: Experience or interest in cloud security tools (Google Cloud SecOps, Security Command Center, Mandiant, SOAR systems). Advanced Multi-Modal Workflows: Experience with multi-modal inputs/outputs, streaming agent architectures, or custom agent routing engines. Why Join Foresite? Foresite is a mission-driven partner helping organizations navigate complex cyber threat landscapes. Founded by security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency. For software engineers, Foresite is a place where you can build high-performance, multi-tenant SaaS platforms without the drag of legacy bureaucracy. We are a "humans-first" engineering organization where we build to scale, respect technical depth, and treat developer well-being as a top priority. As a Google Cloud Premier SecOps Partner, we operate on the cutting edge of cloud-native infrastructure, giving you the runway to solve highly complex, real-world distributed systems challenges. What we offer: Modern Tech Stack & Best Practices: Work with a clean, modern stack including React 19, TypeScript, Tailwind CSS, PostgreSQL, Drizzle ORM, and Google Cloud Platform (GCP). We believe in shipping safely and frequently using stacked PR workflows, comprehensive Vitest/Playwright test suites, and robust CI/CD pipelines. Impactful Work on AI & Automation: You won't just maintain legacy code. You’ll design scalable data access patterns, build modular service/repository architectures, and deploy cutting-edge AI and agentic automation to protect global enterprises from modern cyber threats. Growth, Mentorship & Training: Foresite directly encourages and funds continuous learning. We provide pre-approved vendor and technical training entirely at our expense, alongside a culture of supportive peer code reviews and deep technical mentorship. Comprehensive Health & Wellness: Enjoy top-tier health coverage, including robust medical, company-paid dental, short-term (STD), and long-term disability (LTD) plans. Time to Recharge: We believe in high performance, not burnout. We offer a competitive Paid Time Off (PTO) package starting at 3 weeks of paid vacation (accruing up to 4 weeks based on tenure), plus paid sick leave and 10 paid company holidays (including a floating holiday) to ensure you have the flexibility to rest. 401(k) Company Match: Secure your financial future with our competitive retirement match program—we match 100% of your first 3% contribution, and 50% of the next 2% contribution.

Lead technical onboarding and develop detection rules and playbooks for cloud security automation. | Requires 2+ years experience with Google SecOps, parser creation, YARA-L, Python, and configuring GCP SCC and Wiz. | Foresite is looking for a highly technical, results-oriented Cloud Security Engineer to serve as the technical lead for onboarding customers to GCP Security Command Center (SCC) and Wiz. In this role, you will be the driving force behind ensuring cloud security findings are seamlessly integrated into Google SecOps, providing our clients with a unified and actionable security posture. What You'll Do: In this role, you will operate at the heart of Foresite’s technical onboarding framework. You will lead the hands-on configuration of cloud security tools, partnering closely with customer analysts to translate complex findings into automated, high-fidelity security operations. You will be measured on your ability to drive successful technical handoffs and your proficiency in building custom detection and remediation logic. Technical Onboarding & Implementation Lead the Integration: Lead the hands-on configuration of GCP SCC and Wiz for new customers, ensuring all high-fidelity security findings are correctly ingested into Google SecOps. Data Integrity: Ensure technical accuracy in parser creation and UDM mapping to maintain the highest quality of security data. Detection & Automation Custom Logic: Write custom YARA-L detection rules to correlate cloud posture findings with network traffic. Streamline Response: Develop end-to-end SOAR Playbooks and utilize Python to write logic for custom actions, streamlining the customer's remediation workflows. Customer Enablement & Support Technical Walkthroughs: Lead sessions for customer analysts, teaching them how to navigate SCC/Wiz findings and investigate alerts within the Google SecOps interface. Troubleshooting: Act as the technical point of contact for resolving integration errors and optimizing automation scripts. Who You Are: SecOps Expert: You have at least 2 years of strong hands-on experience with Google SecOps (Chronicle), specifically in parser creation, UDM mapping, and YARA-L rule writing. Cloud Specialist: You possess proven experience configuring GCP SCC and Wiz, with foundational knowledge equivalent to a Google Cloud Associate Cloud Engineer. Automation Minded: You are proficient in Python and enjoy using it to solve complex security automation challenges. Independent Driver: You have a demonstrated ability to manage a customer onboarding from technical kickoff to final handoff without constant senior oversight. Strategic Communicator: You can translate deep technical configurations into actionable insights for customer security teams. Nice to Have: Certified Professional: Current Google Cloud Associate Cloud Engineer or professional security certifications. Advanced Scripting: Experience building complex API integrations between cloud security platforms. Architectural Vision: Experience advising customers on cloud security best practices and long-term posture management. Why Join the Foresite Team? At Foresite, we aren’t just another security provider—we are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by passionate security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency. When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people. What We Offer: Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy. Employer-Covered Insurance: We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD). Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays. Growth & Mentorship: Access to world-class training. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership. Impactful Work: Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.