---
title: 'Engineering Manager, Agent & Product Security at Cursor'
canonical: 'https://feeny.ai/job/engineering-manager-agent-product-security-cursor-new-york-6kwpxcebfy06'
type: 'job'
last_seen: '2026-10-13'
---

# Engineering Manager, Agent & Product Security at Cursor

- **Company:** Cursor
- **Location:** New York, NY
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-07-14
- **Last confirmed live:** 2026-10-13
- **Apply:** https://jobs.ashbyhq.com/cursor/635bd64f-b554-4d37-9128-cefad35913af

## Job description

Our mission is to automate coding. The first step in our journey is to build the best tool for professional programmers, using a combination of inventive research, design, and engineering. Our organization is very flat, and our team is small and talent dense. We particularly like people who are truth-seeking, passionate, and creative. We enjoy spirited debate, crazy ideas, and shipping code.

## About the role

Cursor’s agents work inside the codebases of some of the most security-conscious engineering organizations in the world — holding credentials, reading untrusted content, running tools, and shipping changes. Today they act on authority delegated per task. Where we’re headed, they’ll work more like coworkers: autonomous over long horizons, holding standing responsibilities, initiating work, and collaborating with people and other agents. The security models that future needs — identity and accountability for autonomous workers, standing authority rather than per-task permission, agent-to-agent trust, oversight that scales with always-on autonomy — mostly don’t exist yet. As Engineering Manager for Agent & Product Security, you’ll lead the team that makes agentic software development trustworthy. This team owns the security boundaries between customers, data, tools, repositories, workspaces, and agent authority across Cursor’s product and agents and designs the primitives behind them: agent identity, delegated authority, policy enforcement, secure tool execution, and prompt-injection containment. Little of this has settled precedent, so the team’s decisions carry unusual weight for Cursor and for how the industry approaches these problems. Security here is tightly coupled to product strategy: customers adopt agent autonomy as fast as we can make it trustworthy, so the boundaries your team makes safe directly determine what the product can ship. You’ll help set that direction.

## What you’ll do

- Chart the path from supervised agents to trusted autonomous ones: define the security primitives that enable agent autonomy, and lead the team that builds them.
- Engineer the isolation that makes Cursor safe to run inside customers’ most valuable codebases: tenancy, workspace, secret, and data protections designed for real adversaries.
- Build the authority infrastructure autonomous agents need: identity, scoped permissions, policy enforcement, and secure tool execution, so an agent can hold real responsibility with verifiable limits and full accountability.
- Build customer-facing security controls that are understandable, usable, and strong enough for Cursor’s most security-sensitive customers, with crisp success metrics for security outcomes.
- Hire, coach, and grow a high-performing security engineering team while staying technically close to the work: write and review code where useful, and keep execution fast and technically grounded.

You may be a fit if

- You’ve led engineering teams shipping production systems with high security, reliability, or platform stakes — and you want a problem space where much of the answer isn’t written down yet.
- You have strong product and systems judgment: you can reason from user workflows to architecture, threat models, enforcement points, and operational tradeoffs — and you see security as something that enables product capability, not only restricts it.
- You understand modern application security, authorization, tenancy, identity, secrets, data isolation, and secure-by-default platform design.
- You have good instincts about AI agents: how they use tools, where authority should come from, how prompt injection and exfiltration show up in practice, and how to build mitigations that hold up against creative adversaries.
- You’re comfortable operating in ambiguity: you can set strategy where precedent is thin, commit to a direction, and stay close enough to the implementation to know when to change it.
- You can partner well across product, infrastructure, ML, and customer-facing teams.

## #LI-DNI

## About Cursor

## Company Overview
- **One-liner**: Cursor is an AI coding agent and software development environment that enables developers to build, test, and ship software using natural-language instructions and autonomous agents.
- **Entity Type**: Private (pending acquisition by SpaceX/xAI)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2022
- **Founders**: Michael Truell, Sualeh Asif, Aman Sanger, Arvid Lunnemark

## Core Business
- **Primary industry**: Artificial intelligence, developer tools, software development
- **Target customers**: B2B (enterprise, SMB, individual developers); trusted by over half of the Fortune 500
- **Mission/purpose**: To build the future of software development and help engineers "engineer anything"

## Products & Services
- **Cursor (AI Coding Agent)**: The flagship product — an AI-powered code editor and agent that searches codebases, edits files, runs terminal commands, and completes multi-step programming tasks from natural-language instructions. Available as a desktop IDE, web app, mobile app (iOS), and CLI.
- **Bugbot**: A code-review tool integrated with GitHub pull requests that autonomously detects bugs and issues.
- **Composer Models**: A family of proprietary agentic coding models (Composer, Composer 1.5, Composer 2, Composer 2.5) trained with reinforcement learning for long-running coding tasks.
- **Cursor Automations**: Always-on agents that run on schedules or triggers to build, maintain, and fix software.
- **Cloud Agents**: Agents that run in their own cloud environments to build, test, and demo features end-to-end.
- **Graphite**: A separate product acquired by Cursor (formerly a stack-based Git workflow tool).

## Market Standing
- **Valuation**: $29.3 billion (Series D, November 2025); pending acquisition by SpaceX/xAI at $60 billion (announced June 16, 2026)
- **Key Metric**: $3 billion+ Annual Recurring Revenue (ARR) as of May 2026
- **Notable Investors**: Accel, Coatue Management, Thrive Capital, OpenAI Startup Fund, Google, Nvidia; angel investors include Nat Friedman (former GitHub CEO) and Arash Ferdowsi (Dropbox co-founder)
- **Growth Signals**: Crossed $100M ARR in Jan 2025, $500M ARR by June 2025, $1B ARR by Nov 2025, and $3B ARR by May 2026. Headcount grew from ~300 (2025) to 579 (mid-2026). Expanding into mobile, Jira integration, and enterprise features.

## Competitive Advantages
- **Proprietary coding models (Composer series)** trained with reinforcement learning specifically for software development tasks — a deep technical moat
- **Complete codebase understanding** at any scale, enabling agents to work contextually across large, complex codebases
- **Multi-model flexibility**: Integrates models from OpenAI, Anthropic, Gemini, xAI, and their own models, letting users choose the best tool per task
- **Agentic infrastructure**: Agents that run autonomously, in parallel, and across environments (terminal, Slack, GitHub, Jira, cloud)
- **Massive adoption**: Trusted by over half the Fortune 500 and millions of developers — strong network effects and brand lock-in

## Strategic Focus
- **Scaling agentic capabilities**: Moving from assisted coding to fully autonomous software development agents
- **Enterprise expansion**: Building admin controls, SSO, compliance features, and usage analytics for large organizations
- **Platform ecosystem**: Expanding into adjacent tools (Jira, Slack, GitHub, mobile) to embed agents everywhere developers work
- **Model research**: Continued investment in training frontier coding models with reinforcement learning and synthetic data
- **Post-acquisition integration with xAI**: Leveraging SpaceX/xAI compute and infrastructure for even larger models

## Why Work Here
- **Mission-driven research environment**: Cursor describes itself as "an applied research team focused on building the future of software development" — a rare blend of R&D and product engineering
- **Talent density**: The company "obsesses over talent to an unusual degree" and designs itself as "a haven for self-motivated individual contributors"
- **Rapid growth trajectory**: From 0 to $3B ARR in ~4 years — employees work on products used by millions and see massive scale
- **Compensation**: Competitive for AI/engineering talent; top-of-market salaries and equity in a high-valuation private company
- **Work policy**: Mix of in-office (San Francisco, New York) and remote roles; many engineering roles are on-site
- **Engineering culture**: Two-day on-site final interviews with the core team; no AI tools allowed in first-round coding interviews — they value raw problem-solving
- **Team composition**: 579 employees with strong talent density from Stripe, Figma, Notion, Vercel, Graphite, Slack, Rubrik, and Plaid
- **Recent departures to**: Anthropic, OpenAI, Google, AWS — alumni are highly sought after

## Sources
1. [cursor.com](https://cursor.com)
2. [cursor.com/careers](https://cursor.com/careers)
3. [LinkedIn](https://www.linkedin.com/company/cursorai)
4. [Wikipedia](https://en.wikipedia.org/wiki/Cursor_(company))
5. [JobsByCulture](https://jobsbyculture.com/blog/working-at-cursor-2026)

## Other roles at Cursor

- [Software Engineer, RL Data](https://feeny.ai/job/software-engineer-rl-data-cursor-san-francisco-2h81w11pwrd2) — San Francisco, CA
- [Forward Deployed Engineer - Japan](https://feeny.ai/job/forward-deployed-engineer-japan-cursor-japan-n2z1ybx7y9p5) — Japan
- [Software Engineer, Grok Connectors](https://feeny.ai/job/software-engineer-grok-connectors-cursor-palo-alto-pv3ppqtwpy7r) — Palo Alto, CA
- [Field Marketing Manager](https://feeny.ai/job/field-marketing-manager-cursor-japan-n78ech7ma68z) — Japan
- [Integrated Campaigns, APJ](https://feeny.ai/job/integrated-campaigns-apj-cursor-australia-2yg2rpw5yg3q) — Australia
- [Account Executive, Commercial](https://feeny.ai/job/account-executive-commercial-cursor-new-york-69gea1fmchp5) — New York, NY
- [Forward Deployed Engineer - EMEA](https://feeny.ai/job/forward-deployed-engineer-emea-cursor-london-f7y1wdx5yrng) — London, United Kingdom
- [Senior Brand Designer](https://feeny.ai/job/senior-brand-designer-cursor-san-francisco-vr3c80fb8d10) — San Francisco, CA
- [Creator Campaign Manager](https://feeny.ai/job/creator-campaign-manager-cursor-san-francisco-8mvjqj9q6aqr) — San Francisco, CA
- [Forward Deployed Engineer](https://feeny.ai/job/forward-deployed-engineer-cursor-san-francisco-wz5cgex6qx4b) — San Francisco, CA