AI Engineer

ph3AI Engineer /h3bFull-time /bbHybrid (Antwerp, Belgium) /bh3Job Details /h3pAs an AI Engineer, you’ll work closely with the founders and our RD team on XFA’s next security layer: bsecuring AI agents on the devices companies don’t control /b. AI agents now read files, call tools, and act on company data from personal laptops, contractor machines, and other unmanaged devices. You’ll help give every agent a verifiable identity tied to a human sponsor, grant it only the authority its task needs, detect when it is manipulated or goes off script, and do all of that without invading the user’s privacy.br/This role is perfect for an experienced engineer at the intersection of AI and security engineering. You understand how large language models and agents work under the hood, and you’re just as comfortable reasoning about threat models, key management, and hardware-backed security such as bsecure enclaves and TPMs /b. You’ll work across on-device services, our cloud platform, and our AI tooling, including our bMCP server /b.br/This position is a unique opportunity to help define how AI agents are secured in the real world, from research all the way to production. /ph3About XFA /h3pbXFA /b is a growing Belgian start-up that creates game-changing cybersecurity technology to protect users and businesses around the world.br/While legacy technologies rely on complexity to secure devices, XFA automatically finds all unknown and unsafe devices, and blocks them at login to ensure device security — without intrusive device control.br/As we continue to expand, we’re looking for ambitious people to join us in shaping the future of cybersecurity. /ph3Responsibilities /h3ulliDesign and build bidentity and authentication for AI agents /b: short-lived credentials tied to a human sponsor and bound to the agent’s process with hardware-backed keys (bSecure Enclave, TPM 2.0 /b). /liliDevelop policy-based authorization and delegation for agents, so authority narrows at every step when one agent hands work to another and never exceeds what the task needs. /liliBuild bon-device enforcement /b where agents actually act, starting with MCP tool calls, with low-latency local decisions that don’t break the user’s workflow. /liliDetect threats to and from AI agents: unknown agents, behavior that drifts from an agent’s expected scope, and bprompt injection or tampering /b in inputs, system prompts, memory, and retrieved data, including multimodal content. /liliDesign bprivacy-preserving AI pipelines /b: on-device processing first, filtering personal data before it leaves the device, and bconfidential computing /b with remote attestation (e.g. AMD SEV-SNP, Intel TDX, AWS Nitro Enclaves) where server-side processing is unavoidable. /liliApply LLMs where they genuinely add value, such as risk assessment and clear, user-tailored security guidance, choosing between prompting, retrieval-augmented generation, fine-tuning, and small local models based on accuracy, latency, and cost. /liliBuild bevaluation pipelines /b, attack simulations, and automated tests that measure detection quality and keep AI output reliable in production. /liliKeep up with the fast-moving landscape of AI agents, emerging attacks, and standards, and turn that knowledge into product. /li /ulh3Requirements /h3ulliSeveral years of experience shipping production software in Golang, Python, Typescript, or a systems language such as Rust or C++. /liliA solid understanding of how bLLMs and AI agents /b work: tokens and context windows, embeddings, tool calling, agent orchestration, and the strengths and limitations of different models. /liliHands-on experience building with LLMs (e.g. Claude, GPT, Gemini, or open-weight models), agent frameworks, or the bModel Context Protocol (MCP) /b. /liliA strong bsecurity engineering /b background: threat modeling, secure system design, applied cryptography, and authentication and authorization protocols (e.g. OAuth 2.0, OpenID Connect, JWT). /liliWorking knowledge of bhardware-backed security /b: secure enclaves, TPMs, platform key stores, confidential computing, and remote attestation. /liliA good grasp of AI-specific attacks, such as prompt injection, data poisoning, and memory or instruction tampering, and how to defend against them. /liliA pragmatic, measurement-driven mindset: you know how to evaluate AI output and don’t trust a demo that only works once. /liliExcellent communication skills, both asynchronous and synchronous, and comfortable working independently and proactively in a bfast-moving start-up. /b /liliExperience with OS internals or endpoint security on macOS or Windows (e.g. Endpoint Security framework, ETW, eBPF) is a strong plus. /liliExperience with policy-as-code (e.g. Cedar, OPA), workload identity (e.g. SPIFFE/SPIRE), or privacy-enhancing technologies is a plus. /liliFluent in English; other European languages (e.g., French, German, Dutch) are a plus. /li /ulh3What

we offer
/h3ulliWorking in a motivated team, dreamin