Engineering Manager, Agent & Product Security

Cursor's agents work inside the codebases of some of the most security-conscious engineering organizations in the world, holding credentials, reading untrusted content, running tools, and shipping changes. Today they act on authority delegated per task. Where we're headed, they'll work more like coworkers: autonomous over long horizons, holding standing responsibilities, initiating work, and collaborating with people and other agents. The security models that the future needs, identity and accountability for autonomous workers, standing authority rather than per-task permission, agent-to-agent trust, oversight that scales with always-on autonomy, mostly don't exist yet.

• Chart the path from supervised agents to trusted autonomous ones: define the security primitives that enable agent autonomy, and lead the team that builds them
• Engineer the isolation that makes Cursor safe to run inside customers' most valuable codebases: tenancy, workspace, secret, and data protections designed for real adversaries