Lead the design and implementation of agentic application-security workflows across the SDLC. Build AI agents for threat modeling, secure coding, CI/CD validation, testing, release risk assessment, and production feedback. Define security context models, guardrails, decision rules, human-review requirements, and escalation paths. Integrate workflows with engineering platforms, lead engineers across teams, validate outputs with security experts, and continuously improve agent quality, observability, and production readiness.
We are hiring a Staff AI Engineer (Lead) to design and drive an ambitious agentic security workflows covering the full SDLC — from requirements, threat modeling, secure coding, CI/CD validation, security testing, release risk assessment, and production feedback loops.
This role focuses on building reliable AI agent systems that understand product security context, support SDLC validation, improve release readiness, and help engineering teams adopt secure AI-assisted development practices. The ideal candidate combines AI agent engineering, backend/platform experience, and cross-team technical leadership.
Why Money Forward?
- Join Money Forward at a major strategic turning point as the company shifts from “cloud” to “AI” and advances AX (AI Transformation) beyond traditional DX.
- Help build the foundation for AI agents and “digital workers” that can autonomously perform back-office tasks across Money Forward products.
- Own greenfield architecture for agentic security workflows that directly support the company’s AI strategy, product trust, and secure AI-driven development.
- Work on a rare intersection of agentic AI, application security, and cross-team engineering leadership, shaping reusable standards, guardrails, and implementation patterns across product teams.
- Contribute to Money Forward’s ambition to become Japan’s No. 1 back-office AI company by enabling safer, faster, and more reliable AI-powered value creation.
- Help shape one of the company’s most advanced agentic AI initiatives: a multi-agent security workflow designed to support the full software development lifecycle, while keeping human review, safety boundaries, and release governance in place.
Responsibilities
- Design end-to-end agentic security workflows for SDLC validation, patch management, proactive testing, risk reporting, and release gates.
- Own the product security context model, including architecture, data sensitivity, authentication/RBAC, credential and PII handling, logging touchpoints, release tier, and critical product flows.
- Define agent decision rules, including advisory behavior, human-review requirements, release-blocking criteria, risk thresholds, and escalation paths.
- Design and implement agent guardrails such as least-privilege access, prompt-injection handling, safe tool execution, audit logging, rollback, and kill-switch mechanisms.
- Build and maintain AI agent workflows using LLMs, context engineering, tool integrations, orchestration, harness design, loop engineering, and evaluation pipelines.
- Validate agent outputs with security experts before rules are trusted for production use.
- Lead application engineers across divisions and translate agentic workflow designs into stack-specific implementation patterns.
- Work with SRE/PRE on CI/CD integration, GitHub/CircleCI workflows, Datadog checks, staging safeguards, and release-gate mechanics.
- Coordinate with QA, privacy, and security specialists on regression validation, release readiness, PII handling, and secure coding rules.
- Own false-positive tuning, rule-change backlog, and continuous improvement of agent quality.
Requirements
Requirements
- Bachelor’s degree or higher in Computer Science, Software Engineering, or a related technical field.
- Strong experience with Python or JavaScript building LLM-based applications and AI agents, with hands-on experience in LLM tooling, frameworks, platforms, RAG and evals.
- Strong understanding of context engineering, instruction design, prompt hardening, tool boundaries, harness design, loop engineering, and agent evaluation.
- Ability to design production-ready agent workflows with clear inputs, outputs, failure modes, human-review points, and escalation rules.
- Experience with CI/CD, observability, logging, monitoring, and production-readiness practices.
- Ability to lead 3–5 engineers across teams without direct authority.
- Strong problem-solving skills
- Strong communication skills
- Experience with AI agent frameworks such as LangGraph, LangChain, OpenAI Agents SDK, or equivalent.
- Experience integrating AI workflows into GitHub, CircleCI, Datadog, or similar engineering platforms.
- Experience creating reusable engineering standards, templates, checklists, and enablement materials.
- Working knowledge of application security concepts such as threat modeling, OWASP, secure coding, secrets handling, PII handling, and release risk assessment; or proven ability to work closely with security experts and convert their knowledge into agent rules and checklists.
- Working familiarity with additional stacks used across product teams, such as Ruby/Rails, Go, Java, React, or Vue.
- Ability to work effectively in a rapid, iterative development environment with a high degree of autonomy.
- Japanese: Business-level or higher preferred. (Optional)
- English: Ability to read and write technical documentation and collaborate with engineering teams.
Similar Jobs
Cloud • Fintech • Software
Lead the design and delivery of AI context engineering and evaluation harness workstreams. Develop RAG, memory, token-management, ontology, MCP integration, sandboxing, orchestration, validation, and evaluation standards. Support pilot teams, define integrations with GitHub, Notion, and Slack, build YAML-based knowledge models and repo-native harness prototypes, and translate pilot evidence into company-wide best practices and technical standards.
Top Skills:
Agent PlatformsCiContext EngineeringDeepevalGitGitHybrid SearchIndexing PipelinesMarkdownMemory ArchitectureModel Context Protocol (Mcp)NotionPromptfooRagRetrieval PipelinesSchemasSlackToken ManagementYaml
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Manage end-to-end transaction banking and retail payments projects within the BFSI sector, including compliance and regulatory initiatives. Lead Agile delivery, ISO 20022 payments projects, stakeholder communications across multiple geographies, release cycles, delivery management, RAID tracking, escalations, and senior stakeholder engagement. Mobile release management experience is preferred.
Top Skills:
AgileConfluenceIso 20022JIRA
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Business Analyst responsible for payments and digital journey initiatives within retail and global banking. The role involves requirements elicitation, backlog and Agile delivery management, customer channel analysis, MVP prioritization, epics and user stories, stakeholder alignment, market and As-Is analysis, solution walkthroughs, implementation support, and coordination across business, technology, operations, risk, legal, compliance, and UX teams.
Top Skills:
ConfluenceJIRA
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
