About Refold AI
Refold AI is the AI integration platform built for agents, made for contemporary SaaS companies that need to ship enterprise integrations at scale. We're reimagining integrations with AI agents that work like business consultants and integration engineers, building them 10x faster, in hours instead of days. You win the enterprise deals that hinge on them, onboard faster, and scale without an army of consultants.

We've grown rapidly, reaching seven-figure ARR and 30+ paying customers, powering the product and professional services teams at modern SaaS companies, from Incorta, Kantata, and Coupa to Highradius, Naehas, and OvationCXM.

Refold AI has raised $6.5M from world-class investors including Eniac Ventures (early investors in Airbnb & Uber), Tidal Ventures, and Better Capital.

You will set the security direction for the whole platform and build much of it with your own hands. This is a hands-on Staff+ role: you write code, review designs, and lead incidents, not only policy.Protect customer credentials and data across a multi-tenant platform and every deployment model we ship.

- Make AI agents safe to connect to enterprise systems, from prompt injection to tool-permission scope.
- Harden how we build and ship, from the monorepo and CI to the images and Helm charts customers run in their own clusters.
- Turn security into a sales advantage by owning the technical side of enterprise security reviews and our compliance program.

You will work across every engineering team, partner with product and go-to-market, and help hire and grow the security function.

Cloud and infrastructure security
IAM, workload identity, network policy, egress control and private control planes.
Build runtime security for containers and nodes, so a compromised workload is detected and contained fast.

Product and application security
Guarantee tenant isolation across shared data stores, queues and workflow engines.
AI and agent security
Define how AI agents get scoped,



auditable access to enterprise systems through our MCP servers and AI gateway.
Defend against prompt injection, tool misuse and data exfiltration through agents.

Software supply chain
Lead security incidents end to end: triage, forensics, containment, customer communication and the post-incident fix.

Be the senior technical voice in enterprise security reviews, questionnaires and customer calls.
Run SOC 2 and ISO 27001 as engineering work: automate evidence, own pen-test scoping and drive remediation.
Publish hardening guidance for customers who self-host or run Refold in their own cloud.

Mentor engineers, run a security-champions program, and help hire the security team.

Typically 8+ years in security or software engineering, including several years as the senior security engineer for a multi-tenant SaaS platform.
Deep cloud and Kubernetes security experience. strong AWS or Azure depth is fine.
Strong application security: threat modelling, secure design review, and code review in at least one of TypeScript/Node.js, Python or Go.
You have led real production security incidents, including forensics and customer communication.
Hands-on software supply chain work: CI/CD hardening, artefact signing, SBOMs and dependency risk.
You write production-quality code and ship tooling, not only recommendations.
You have represented a company's security in front of enterprise security teams, and won their trust.
Clear, direct writing. You explain risk to engineers, executives and customers in their own terms.

Bonus points:

Security work on LLM and agent systems: OWASP Top 10 for LLM applications, MCP, tool-use permissions.
Shipping software that customers run in their own environments: Securing workflow engines and data stores such as Temporal, MongoDB, Redis and PostgreSQL.
Background in integration platforms, iPaaS, or enterprise systems like SAP, Workday or Salesforce.
Offensive security experience, published research, CVEs or open-source security tooling.
HIPAA or other regulated-data experience.
You have built a security team from the first hire.

📌 Workday Security Lead (Bengaluru)
🏢 Refold AI
📍 Bengaluru