Software Engineer - Agent Guardrails

Location: Germany (remote) or Bengaluru, India BlueRock is hiring one engineer to own our language-runtime sensors — the instrumentation layer that hooks into key packages generating events for our policy engine allowing real-time block decisions. It's the layer that sees what an AI agent is actually doing, as it happens. What You'll Own Sensor Architecture: Design and build low-latency runtime instrumentation across Node.js and Python to track AI agent execution paths in real time. Ecosystem Expansion: Pioneer hooks and interceptors for emerging protocols (like MCP), LLM SDKs, web frameworks, and new execution transports. Proactive Adaptation Systems: Engineer automated systems and harness tooling to detect, test, and automatically surface upstream SDK shifts before they impact runtime behavior. Performance Optimization: Enforce strict execution overhead budgets to ensure guardrails never compromise host agent execution speed. What You'll Need Production mastery in Node.js and Python: experience with dynamic module loading, monkey-patching, and low-level runtime interception in both ecosystems. Systems & FFI fundamentals: Comfort bridging managed runtimes into compiled binaries (e.g., Rust, C, C++), with fundamental understanding of memory management, thread safety, and dynamic linking. Async execution expertise: Deep understanding of non-blocking control flow (asyncio, Node event loop) to ensure hooks never block host applications. Proven track record of building resilient software on top of fast-evolving third-party SDKs and uncooperative runtimes. A diagnostic mindset built for hunting down race conditions, memory leaks, and silent failures across runtime boundaries. About BlueRock: BlueRock is a well-funded, early stage cybersecurity company founded by experienced security minded entrepreneurs. Our mission is to change the game in cybersecurity. Attackers are exploiting in hours. The dependency tree is exploding. Developers are drowning in vulnerability debt. BlueRock changes the game, enabling organizations to shift from chasing CVEs and exploits to proactively protecting the foundations of applications and computing, so that developers can build great applications without looking over their shoulders.