Marcura is hiring its first dedicated Security Engineer to establish the company’s security engineering capability end-to-end. The role is hands-on and broad, spanning offensive assurance, defensive engineering, secure architecture and governance across applications, APIs, cloud infrastructure, and AI features including large language models and AI-enabled services. The successful candidate will personally perform penetration testing and AI red team exercises, design and harden defensive controls, review architecture early in the delivery lifecycle, define secure-by-design patterns for LLM and agentic systems, and act as a trusted AI security advisor to product, engineering, data and operations teams. The position operates remotely and, while leveraging external MDR and third-party testing partners, the engineer will own these partnerships, prioritize work, and build a defensible case for further investment as the security function matures. Responsibilities include defining security strategy and roadmaps, secure architecture reviews, AI security advisory, practical AI security framework development, internal and external penetration testing, MD R partnership ownership, hands-on testing and red teaming, cloud and application hardening, identity, access and data protection, incident response enablement, vulnerability management, security tooling and automation, third-party and model assurance, and driving security culture across engineering and product teams. The role requires a track record of real-world vulnerability discovery and security impact, rather than certifications

Marcura is hiring its first dedicated Security Engineer to establish the company’s security engineering capability end-to-end. The role is hands-on and broad, spanning offensive assurance, defensive engineering, secure architecture and governance across applications, APIs, cloud infrastructure, and AI features including large language models and AI-enabled services. The successful candidate will personally perform penetration testing and AI red team exercises, design and harden defensive controls, review architecture early in the delivery lifecycle, define secure-by-design patterns for LLM and agentic systems, and act as a trusted AI security advisor to product, engineering, data and operations teams. The position operates remotely and, while leveraging external MDR and third-party testing partners, the engineer will own these partnerships, prioritize work, and build a defensible case for further investment as the security function matures. Responsibilities include defining security strategy and roadmaps, secure architecture reviews, AI security advisory, practical AI security framework development, internal and external penetration testing, MD R partnership ownership, hands-on testing and red teaming, cloud and application hardening, identity, access and data protection, incident response enablement, vulnerability management, security tooling and automation, third-party and model assurance, and driving security culture across engineering and product teams. The role requires a track record of real-world vulnerability discovery and security impact, rather than certifications