Build the layer that keeps data in.
We're defining data security for AI — validated detection and redaction on the data itself, across the agents enterprises run and the employees using AI. We're hiring across engineering, research, sales and marketing.
Founded by enterprise-security leaders (ex-Proofpoint, ex-Workday, ex-Teradata), for teams where a leaked AI interaction is a reportable breach.
A hard problem, early, with people who've done it before.
Data security for AI is still being defined — and we're building the specialist layer on the data path.
Depth, not a dashboard.
Validated detection, redaction in place that keeps the reply valid, and fail-closed enforcement where it guards data — inside MCP, A2A and model traffic most tools never inspect.
Shipped and verified.
Three enforcement modes live, an inbound gateway that passes the official MCP SDK against the reference server, and 2,900+ tests. We lead with what we can show.
Regulated data, on the line.
Our users are healthcare, fintech and insurance teams where a leak is reportable. Your work decides whether PHI, PCI, PII or secrets leave through AI.
Come build it with us.
Don't see your role? Reach out at hr@blueaspen.ai.
Senior Detection Engineer
Design and build the detection and redaction engine that inspects AI traffic — MCP tools, agent-to-agent calls and model responses — and redacts sensitive data in place without breaking the protocol. You'll own validated detectors and the policy wiring that decides every call.
Responsibilities
- Build and tune validated detectors (Luhn, NPI, IBAN, entropy) with low false-block rates
- Implement result-leg inspection and in-place redaction that preserves protocol validity
- Extend the policy engine so findings from every tier escalate correctly
- Harden the fail-closed ingress and agent-to-tool enforcement paths
- Write tests against real protocol servers, not fixtures that agree with our own bugs
Requirements
- 5+ years security or systems engineering; strong Rust or Python
- Experience with proxies, protocol parsing, or DLP / data-classification systems
- A bias for root-cause fixes at the right layer over patches that pass one test
- Comfort reasoning about regulated data (PHI, PCI, PII, secrets)
Data Security Researcher
Find the ways regulated data leaves through AI — across MCP and A2A result legs, model responses, and the AI apps employees reach for — and turn each finding into a detector we ship. Publish what's safe to share.
Responsibilities
- Research data-exfiltration paths through agent, MCP, A2A and model traffic
- Develop and validate new PII, PHI, PCI and secret detection patterns
- Build differential test harnesses against official reference implementations
- Analyze real incidents and publish threat intelligence for security leaders
Requirements
- 3+ years in security research, detection engineering, or data protection
- Strong understanding of LLM, agent and MCP/A2A protocols
- Published security research or conference talks a plus
ML Platform Engineer
Build and scale the analyzer platform behind our detection — local ONNX models, the async analysis pipeline, and the event store — so semantic detection runs fast and, by default, without sending customer data to a third-party LLM.
Responsibilities
- Operate and optimize local ONNX analyzers for low-latency inference
- Build the async analysis pipeline and the events store that feeds the dashboard
- Keep the detection path reliable under load, with clean tenant isolation
- Instrument quality so detector precision and recall are measurable
Requirements
- 4+ years in platform or ML-infrastructure engineering
- Strong Python plus Go or Rust; comfort with streaming data systems
- Experience running inference in production (ONNX Runtime a plus)
Entry-Level Security Engineer
Start your career on data security for AI. Work alongside experienced engineers and researchers on detection rules, policy, and the tests that keep our enforcement honest.
Responsibilities
- Develop and test detection rules and policy configurations
- Help build detector test suites against real protocol servers
- Contribute to redaction and policy-evaluation code paths
- Investigate false-positive and false-block reports and fix the root cause
Requirements
- Bachelor's in CS, cybersecurity, or related field
- Proficiency in Python; curiosity about data protection and AI security
- Strong problem-solving and communication skills
Account Executive — Data Security for AI
Help regulated enterprises adopt data security for AI. You'll work with CISOs, platform and GRC leaders to find where AI reaches sensitive data — and position BlueAspen as the specialist on that path.
Responsibilities
- Own the full sales cycle from prospecting to close for enterprise accounts
- Build relationships with CISOs, platform/AppSec and GRC leadership
- Run discovery on where regulated data meets AI, and map it to our wedge
- Deliver demos and technical narratives to security and compliance stakeholders
- Manage pipeline and forecast accurately
Requirements
- 3+ years in B2B SaaS sales, preferably cybersecurity or data protection
- Track record of meeting or exceeding quota
- Able to articulate a technical wedge to both technical and business buyers
- Experience selling to enterprise security teams a strong plus
Growth Marketing Manager
Own BlueAspen's growth engine — from category awareness to demand. You'll build the marketing that defines “data security for AI” and drives qualified pipeline for the sales team.
Responsibilities
- Build content on AI data security — blog, briefs, and proof-driven case studies
- Plan and run digital campaigns across LinkedIn, search and industry channels
- Own SEO around data security for AI, MCP/agent security and result-leg DLP
- Run webinars, sponsorships and thought-leadership programs
- Track and optimize funnel metrics with product and sales
Requirements
- 3+ years in B2B SaaS marketing, preferably cybersecurity or developer tools
- Content, demand-gen and marketing-automation experience
- Strong writing — able to translate a technical wedge for business audiences
- Data-driven; familiarity with the AI and security landscape a strong plus