get hired at
Pluto Security
Security for the AI tools, agents and skills employees build at work
- 40
- JCSTPRSKI+9
- New York
- AI
Open roles at Pluto Security
4 positions we're tracking, re-checked daily
- apply ↗
Security Researcher (AI supply chain / MCP)
new york, usa & tel aviv, israelMid-levelfirst seen today - apply ↗
Endpoint / Agent Engineer
new york, usa & tel aviv, israelMid-levelfirst seen today - apply ↗
Enterprise AE (US)
new york, usa & tel aviv, israelMid-levelfirst seen today - apply ↗
Solutions / Sales Engineer (US)
new york, usa & tel aviv, israelMid-levelfirst seen today
Know when Pluto Security is hiring before anyone else
A role stays uncontested for about four days. Here's the window, and where we put you in it.
From $5.99/week, cancel any time.
- live
- +2h+2hrole spotted & verified1
- +4h+4hyou get the alert1
- day 3day 3you've applied~8
- day 7+day 7+hits the job boards250+
What Pluto Security is building
Pluto secures the AI layer employees are building on their own: Claude Code, Codex, Cowork, Lovable, Base44, and the skills, MCP servers, extensions, apps and agents people bolt onto them. Sensors deploy through existing EDR/MDM or directly onto devices and collect prompts, commands, running processes, permissions and user activity. Lightweight on-endpoint models then judge whether an agent's action matches what the user actually intended. The interesting primitive is intervention mid-task. Instead of blocking AI tools, Pluto can stop a single action that exceeds the user's intended permissions, or inject context back into the agent session so the agent asks for confirmation. As Shahar Bahat put it: 'We're moving from user behavior to agent behavior.' The platform is organized into Explorer (AI asset discovery), Risk Radar (triage), Space Shield (policy enforcement) and Marketspace (a vetted catalog of AI add-ons). The distribution wedge is Plutonium, a free AI supply-chain risk catalog with an MCP scanner that thousands of security practitioners use. Per TechCrunch, about 70% of Pluto's pipeline comes inbound.
Why this matters
The threat surface moved from developers to everyone. Pluto's own data (via TechCrunch) says about 60% of the risks it detects sit in tools vibe-coded by non-developers, with finance the largest source, then marketing and legal, and developers only fourth. Bahat says there was 'not one POC in which we entered and didn't find malicious stuff.' Traditional DLP and CASB see network traffic and SaaS apps, not a local agent chaining an MCP server to a shell command. Security teams can't ban these tools without losing the productivity argument, so 'enforce without blocking' is the only politically viable product, and Pluto got to $2M+ ARR in about six months selling it.
Investors: Jump Capital (Saaya Pal), TLV Partners (Rona Segev), Skinos, AlphaDrive Ventures, Ansa Capital, MTF, Vine Ventures, Angels: Yevgeny Dibrov, Nadir Izrael, Slavik Markovich, Asaf Ezra, Ariel Maislos
Hiring outlook
The round explicitly funds product, security research and US expansion, and the team is growing (TechCrunch says ~40 people; the press release says 50+). But there's no public careers page or job board yet, so roles are inferred from the raise.
Working at Pluto Security
Pluto Security is Security for the AI tools, agents and skills employees build at work, and now <50 people. For a AI company this size, the reality is broad remit, direct access to founders, and equity that still means something if the company works out.
Most Pluto Security jobs are based in New York, USA & Tel Aviv, Israel.
How to actually get hired at Pluto Security
Why applying the normal way doesn't work
With only <50 employees, Pluto Security doesn't have dedicated recruiters. Founders review applications between running the company. The challenge isn't competition — it's visibility. Direct outreach wins.
Who to contact at Pluto Security
- Who decides
- a founder or department head
- Best channel
- LinkedIn or direct email
Founding team
Previously VP of Research and Development at Palo Alto Networks, managing an organization of more than 150 people.
Former Unit 8200 operator who went on to senior cybersecurity and product leadership roles at Microsoft and Palo Alto Networks. Forbes 30 Under 30 honoree. Studied at Reichman University (IDC Herzliya).
Spent more than six years in Israeli Military Intelligence in technical leadership roles across advanced cyber R&D and operational security engineering. Later a founding engineer at several startups and an engineer at eBay working on ML systems, security tooling and OSINT. BSc in CS and MBA from Tel Aviv University; co-presented 'PromptINT: Using Prompt Leaks as a New Source of OSINT Intelligence' at a SANS summit.
What to show them
Audit 20 popular public MCP servers or Claude skills, and write up one concrete finding (an over-broad permission, an exfil path, a prompt-injection sink) with a minimal reproduction and a suggested Plutonium risk rule.
A cold email that works at Pluto Security
What Pluto Security screens for
Jump Capital's Saaya Pal framed the bet around data: 'There was no good public data on what AI tools are actually doing inside enterprises.' Plutonium/RisksDB is that dataset, and it doubles as the inbound engine. The angel list is a who's-who of Israeli security exits (Armis' Dibrov and Izrael, Descope's Markovich), which signals a team being set up for a category-leader run. The hiring window is US-side: the money is earmarked for US expansion, and a company with Oscar Health, Workato, Sixt and AlphaSense as logos needs US sales engineers and researchers who can publish. With no public job board, a direct note with a concrete finding beats waiting for a posting.
Don't send a generic CV to Pluto Security. Mirror the job posting's language to get past automated screening.
Don't make these mistakes
Don't lead with 'AI security is a huge market' or 'shadow AI is a growing risk'. Shahar came from senior security leadership at Microsoft and Palo Alto Networks and was a Unit 8200 operator; the founders sell this thesis for a living. Also don't pitch blocking or allow-listing as the answer. Pluto's whole position is enforcing without blocking AI use, so a 'just lock it down' mindset reads as not getting the product.
Mistakes that kill Pluto Security applications
A recycled CV gets rejected fast at Pluto Security (<50 people). They notice.
Lead with their problem, not your ambition. Pluto Security is focused on The threat surface moved from developers to everyone — show you understand that.
Don't apply and wait. The median AI application gets no response ever. One follow-up at day five roughly doubles reply rates.
Applying to Pluto Security? Get the contact, not the form.
The Pluto Security interview process
We don't yet have verified candidate reports for Pluto Security. What follows is the typical process for a <50-person AI company, so treat it as a model, not confirmed detail.
Interview stages
- 1
Intro Call
Video call · 30 min
What it testsCulture fit and role expectationsUsually run byFounder or hiring manager - 2
Technical Deep Dive
Video call or in-person · 60 min
What it testsPast projects and problem-solving approachUsually run byTechnical founder or lead - 3
Final Round
In-person or video · 45 min
What it testsTeam fit and offer discussionUsually run byFounding team
Pluto Security take-home assignment
Pluto Security includes a take-home exercise in their interview process. For AI roles, this typically involves a practical problem that takes 2-4 hours. Focus on clean, working code over premature optimization. They're evaluating how you think and communicate, not just the solution.
Pluto Security interview timeline
At 7 days, Pluto Security's process is faster than typical for AI (10 days at this size).
Interviewed at Pluto Security?
Tell us how it went: stages, questions, timeline. Takes 90 seconds and it's how this page stays accurate for the next person.
Pluto Security jobs, frequently asked questions
How many jobs does Pluto Security have open?
Pluto Security currently has 4 open roles, last verified October 14, 2026.
Does Pluto Security hire remotely?
Pluto Security doesn't have remote openings at the moment. All roles are in New York, USA & Tel Aviv, Israel.
What roles is Pluto Security hiring for?
Pluto Security is hiring across Data, Engineering, Sales. The most recent opening is Security Researcher (AI supply chain / MCP).
How do I apply for a job at Pluto Security?
Apply directly through the links above, or read our guide on how to actually get hired at Pluto Security.
Does Pluto Security respond to cold emails?
We're still collecting cold email data for Pluto Security.
Who is the hiring manager at Pluto Security?
At this size, hiring is usually run by a founder or department head.
How competitive is it to get hired at Pluto Security?
<50-person AI companies see ~50-100 applicants per role in two weeks. The 72-hour window is your advantage.
How many rounds is the Pluto Security interview?
3 stages: Intro Call, Technical Deep Dive, Final Round.
Is the Pluto Security interview hard?
It concentrates on technical depth and system design rather than abstract puzzles. The stage candidates find hardest is Technical Interview.
Does Pluto Security give a take-home task?
Yes, Pluto Security includes a take-home assignment.
How long does Pluto Security take to get back to you?
Around 7 days across the full process.
What should I prepare for the Pluto Security interview?
Study technical depth and system design. At this size (<50), they care about self-sufficiency over textbook knowledge.
Where is Pluto Security based?
Pluto Security is headquartered in New York, USA & Tel Aviv, Israel.
Get Pluto Security roles before they're posted
A role stays uncontested for about four days. Here's the window, and where we put you in it.
From $5.99/week, cancel any time.
- live
- +2h+2hrole spotted & verified1
- +4h+4hyou get the alert1
- day 3day 3you've applied~8
- day 7+day 7+hits the job boards250+
Related
More AI companies hiring
Other startups we track in the same space.