--- title: 'AI Security & Platform Engineer at Metaforms' canonical: 'https://feeny.ai/job/ai-security-platform-engineer-metaforms-bengaluru-0jgh5pr2p44k' type: 'job' last_seen: '2026-10-14' --- # AI Security & Platform Engineer at Metaforms - **Company:** Metaforms - **Location:** Bengaluru, India - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-10-08 - **Last confirmed live:** 2026-10-14 - **Apply:** https://jobs.ashbyhq.com/metaforms/228eeb00-fd71-4814-9e90-b95358413f4f ## Job description ## About Metaforms Metaforms builds AI infrastructure for research delivery teams. Our agents help market research agencies and sample providers execute complex workflows with greater speed, consistency, and scale. As these agents interact with customer data, files, APIs, integrations, and other tools, security must be built into every layer of the platform. We are looking for an engineer who is excited about understanding how AI systems can fail—and building the controls that make them safe, reliable, and secure by default. ## About the role We’re looking for an AI Security & Platform Engineer to help secure the AI agents and infrastructure behind Metaforms. You will test our AI systems adversarially, identify vulnerabilities across prompts, context, data, tools, integrations, and execution environments, and work with engineers to fix them properly. You will also build platform-level controls, automated evaluations, monitoring, and secure infrastructure that prevent similar vulnerabilities from recurring. This is a hands-on engineering role, not a policy or compliance position. You will write code, inspect production systems, reproduce vulnerabilities, build security tooling, and contribute directly to product and infrastructure improvements. You will work closely with engineering leadership and gradually take ownership of larger AI security and platform initiatives. ## What you’ll work on AI and agent security - Adversarially test AI agents for prompt injection, context poisoning, unsafe tool use, data leakage, memory manipulation, and unintended behavior. - Identify security risks introduced through customer prompts, uploaded files, retrieved content, external links, integrations, and model-generated outputs. - Test whether agents can access unauthorized tools, records, tenants, credentials, or internal services. - Threat-model new AI features, agent workflows, model integrations, and tool-calling capabilities before they reach production. - Evaluate risks in RAG pipelines, context assembly, agent memory, system prompts, MCP servers, model providers, and third-party AI frameworks. - Build repeatable adversarial evaluations and regression tests for discovered vulnerabilities. - Design controls for least-privilege tool access, scoped credentials, sandboxing, runtime policy enforcement, and human approval. - Ensure model output is validated before it reaches databases, APIs, executable systems, or customer-visible workflows. - Improve auditability across model calls, retrieved context, tool invocations, agent decisions, and resulting actions. - Monitor emerging AI attack techniques and translate relevant risks into practical product controls. Product security - Review customer-facing applications and APIs for authentication, authorization, tenant-isolation, injection, and business-logic vulnerabilities. - Secure customer-controlled payloads, file uploads, webhooks, exports, and third-party integrations. - Reproduce security reports, determine credible impact, and distinguish exploitable vulnerabilities from theoretical findings. - Work directly with engineers to implement production-ready fixes and regression tests. - Help build secure, reusable patterns for input handling, authorization, secrets, data access, and external integrations. - Perform focused code reviews, penetration tests, and architecture assessments for security-sensitive changes. Platform and infrastructure - Build and improve the secure, reliable infrastructure behind model calls and agent workflows. - Harden cloud permissions, service identities, secrets, storage, networking, deployment pipelines, and production access. - Build guardrails into CI/CD and infrastructure-as-code so common security problems are caught before deployment. - Improve model-provider routing, retries, timeouts, fallbacks, quotas, rate limits, and cost controls. - Add observability for unusual model behavior, tool usage, data access, errors, latency, and token consumption. - Build containment mechanisms and kill switches for unsafe or misbehaving agents. - Support production debugging and the investigation of application, infrastructure, and AI-security incidents. ## What we’re looking for - 2–3 years of hands-on experience across AI engineering, backend/platform engineering, application security, infrastructure security, DevSecOps, or a related engineering role. - Experience building, operating, or securing production AI systems using LLM APIs, agents, tool calling, RAG, model gateways, or similar technologies. - Strong programming ability in Python, TypeScript, Go, or another relevant language. - Understanding of common web and API security risks, including authentication, authorization, injection, tenant isolation, secrets, and unsafe data handling. - Practical experience with cloud infrastructure, CI/CD, containers, monitoring, or infrastructure-as-code. - Ability to investigate a suspected vulnerability, reproduce it, assess its real-world impact, and contribute an effective fix. - Ability to reason about trust boundaries between users, models, customer data, application code, tools, and third-party services. - Comfort debugging systems through source code, logs, traces, metrics, and database queries. - Strong written communication and the ability to explain security risks clearly without unnecessary alarm. - A builder’s mindset: you enjoy implementing durable controls, not only identifying problems. We care more about strong fundamentals, practical work, and learning velocity than matching every item in the description. Good to have - Hands-on experience with AI red teaming or adversarial model testing. - Familiarity with prompt injection, insecure output handling, tool-use vulnerabilities, agent sandboxing, or context leakage. - Experience securing multi-tenant B2B SaaS products. - Experience with OAuth, webhooks, file processing, MCP, and third-party integrations. - Experience building security test harnesses, fuzzers, automated evaluations, or internal security tools. - Familiarity with SAST, DAST, dependency scanning, secret scanning, or infrastructure scanning. - Experience with model gateways, multi-provider routing, AI observability, or LLM evaluations. - Participation in bug bounties, CTFs, security research, or relevant open-source projects. - Familiarity with SOC 2 or ISO 27001 from an engineering implementation perspective. Example projects You might work on projects such as: - Build a test harness that injects malicious instructions through prompts, uploaded files, and retrieved documents. - Find and eliminate a path through which one tenant’s information could enter another tenant’s model context. - Introduce capability-scoped credentials so agents receive access only to the data and tools required for a specific task. - Add security regression evaluations for previously discovered AI vulnerabilities. - Build validation and containment around model-generated JSON, XML, queries, scripts, or API payloads. - Prevent untrusted content from triggering sensitive tool calls without deterministic authorization. - Build traceability from user input through model context, output, tool execution, and final side effects. - Detects unusual tool-call sequences, data-access patterns, agent loops, or token consumption. - Threat-model a new agent capability and implement the required controls before launch. - Turn a recurring vulnerability class into a reusable platform guardrail. What success looks like In your first three months, you will: - Understand the major trust boundaries across Metaforms’ AI agents, customer data, tools, and infrastructure. - Build an initial threat model and prioritized AI-security testing plan. - Reproduce and help remediate high-priority product or AI vulnerabilities. - Add high-signal security tests for important agent and application boundaries. - Improve visibility into model calls, tool usage, and security-relevant agent behavior. Over time, you will: - Build continuous adversarial testing into how Metaforms develops AI features. - Reduce recurring vulnerability classes through reusable controls and secure defaults. - Help engineers ship AI capabilities quickly without weakening customer-data boundaries. - Develop into a technical owner for AI security across the platform. - Make Metaforms’ agents more secure, observable, reliable, and resilient as their capabilities grow. Why join Metaforms? - Work on practical AI-security problems in production agent systems. - Operate across offensive testing, application security, and platform engineering. - Ship fixes and controls directly rather than producing reports that sit in a queue. - Work closely with engineering leadership and influence platform design early. - Take meaningful ownership while growing into an emerging technical specialization. Our hiring process The process will focus on practical engineering judgment rather than security trivia: - Introductory conversation. - Technical discussion covering AI systems, security fundamentals, and past projects. - Practical exercise involving a simplified agent workflow, its trust boundaries, likely attack paths, and one proposed or implemented control. - Final conversation with engineering leadership. Break AI systems like an attacker. Fix them like a platform engineer. ## About Metaforms ## Company Overview - **One-liner**: Metaforms provides an AI-powered platform that automates and augments market research operations for agencies, covering survey programming, data processing, bidding, sample management, and voice research. - **Entity Type**: Private (Series A) - **Headquarters**: New York, New York, United States - **Founded**: 2023 - **Founders**: Akshat Tyagi (CEO), Arjun S (CTO) ## Core Business - **Primary industry**: Market Research Technology (Market Research Operations / AI for Research) - **Target customers**: B2B — Market research agencies, insights teams, and survey programmers - **Mission or purpose statement**: "Making research accessible to every business" by giving market research agencies AI superpowers to deliver insights 10x faster. ## Products & Services - **Survey Programming (AI-Copilot)**: An AI agent that generates production-ready survey code (SPSS, Dimensions, Python, JavaScript) from uploaded questionnaires. Handles complex logic like MaxDiff, segmentation, piping, and loops. Includes version control, multi-programmer workflows, and real-time error detection. - **Data Processing**: AI that flags discrepancies, handles complex validation logic, and integrates with existing macros and workflows to automate data cleaning and processing. - **Bidding Management**: Transforms incoming client emails/RFPs into structured project specifications, identifies missing requirements, and generates accurate quotes using the agency's exact pricing logic. - **Sample Management**: Automatically routes sample requests to the best suppliers, tracks and re-balances quotas across vendors in real-time, and consolidates responses into cost/feasibility comparisons. - **Voice Research**: AI-moderated voice interviews at scale, automating scheduling, respondent screening, and data capture, delivering structured insights. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Raised $9 Million in Series A funding (announced 2025) - **Notable Investors/Partners**: Not publicly named in available sources; investors are listed as part of the Series A round. - **Growth Signals**: 58 employees as of mid-2025; offices in New York (HQ), Bengaluru, and San Francisco; trusted by "world's leading agencies"; growing team with open roles in product engineering, customer success, and product management. ## Competitive Advantages - **Vertical-Specific AI**: Unlike general-purpose AI tools, Metaforms is purpose-built for the market research industry, learning agency-specific coding styles, standards, and pricing logic. - **End-to-End Workflow Coverage**: The platform spans the entire research operations lifecycle—from RFP response and bidding, through survey programming and data processing, to sample management and voice interviews—creating a deep moat. - **Enterprise-Grade Security**: SOC 2 Type II certified, GDPR compliant, and offers custom security documentation for enterprise clients. Explicitly states no training on customer data. - **Pattern Learning**: AI adapts to each agency's coding style and preferences in real-time, making it stickier and harder to replace. ## Strategic Focus - **Product Expansion**: Continuing to build out AI agents across all research workflows (bidding, programming, data processing, sample management, voice). - **Enterprise Sales**: Deepening integrations with Salesforce and major PM tools, and offering API/email-based workflows to fit existing processes. - **Scaling the Team**: Actively hiring across product engineering, customer success, and product management to support growth. - **Market Penetration**: Targeting traditional market research agencies that are constrained by manual processes, enabling them to take on more clients and projects. ## Why Work Here - **Culture**: Mission-driven team focused on making research accessible to every business. Described as a place where "every business decision should be informed." - **Work Policy**: Hybrid and in-office roles available depending on location and function. Offices in New York (HQ), Bengaluru, and San Francisco. - **Team & Growth**: 58 employees and growing. Early-stage startup environment with the opportunity to shape the product and culture. - **Engineering Culture**: Emphasis on building AI agents that "get your business." Roles like Senior Product Engineer and Senior Product Manager are currently open. - **Perks**: Not explicitly detailed, but the company highlights 24/7 support for clients and a "build the future with us" ethos. ## Sources 1. [metaforms.ai](https://www.metaforms.ai/) 2. [metaforms.ai/about](https://www.metaforms.ai/about) 3. [linkedin.com/company/metaformsai](https://www.linkedin.com/company/metaformsai) 4. [builtin.com/company/metaforms](https://builtin.com/company/metaforms) 5. [jobs.ashbyhq.com/metaforms](https://jobs.ashbyhq.com/metaforms) ## Other roles at Metaforms - [Associate Product Manager](https://feeny.ai/job/associate-product-manager-metaforms-bengaluru-0a0x8yd4gwer) — Bengaluru, India - [Technical Project Manager](https://feeny.ai/job/technical-project-manager-metaforms-bengaluru-gr6a1f9q69sk) — Bengaluru, India - [Senior Product Manager](https://feeny.ai/job/senior-product-manager-metaforms-bengaluru-683dp4187sen) — Bengaluru, India - [Customer Success Executive (Onboarding)](https://feeny.ai/job/customer-success-executive-onboarding-metaforms-bengaluru-b2e5nd06vkde) — Bengaluru, India - [Research Manager](https://feeny.ai/job/research-manager-metaforms-bengaluru-20exmjs42r7m) — Bengaluru, India - [Build With Metaforms](https://feeny.ai/job/build-with-metaforms-metaforms-bengaluru-90s6vzc47kp7) — Bengaluru, India - [Senior AI Engineer](https://feeny.ai/job/senior-ai-engineer-metaforms-bengaluru-edbpzw30z4r1) — Bengaluru, India