AI agents are becoming autonomous - they execute code, call APIs, and make decisions without human oversight. An adequate security approach to govern them doesn't exist yet. We're building it.

Our founding team created Sigstore , the open-source signing standard now used by npm, PyPI, Kubernetes, and other critical infrastructure. We're applying that same thinking to agentic security: execution boundaries, immutable attestation, and dynamic capability management for AI agents.

The Role

We're looking for a Software Engineer to join an early, high-trust team. You'll work on nono - our open-source agent security runtime - alongside the founders and our growing team. This isn't a junior ticket queue role: you'll own meaningful pieces of the system, ship in the open, and have your work used by developers building real agentic systems.

It's a role for someone earlier in their career but with unmistakable talent and a track record of ...