Engineering the Deterministic Runtime for Autonomous Systems
Bartholomew secures 31,200+ autonomous agent deployments with sub-35µs in-process AST gating, zero token tax, and RFC 8785 Merkle seals. We are expanding our core compiler and adversarial engineering teams.
How We Build at Bartholomew
We reject the idea that agent safety requires sending prompt tokens to another LLM. Determinism belongs in the compiler, the AST, and the runtime.
Sub-Millisecond Invariants
Every security invariant check executes in under 35 microseconds (<35µs). We build zero-copy AST walkers and polyglot parser trees, not bloated HTTP guardrails.
Zero Token Tax
Zero GPU memory consumed, zero LLM prompt roundtrips. Our runtime protection operates in-process alongside Python, Rust, Node, and Docker containers.
Cryptographic Non-Human Identity
Every autonomous tool action is cryptographically signed with Ed25519 and sealed into an RFC 8785 Canonical JSON Merkle tree for immutable compliance evidence.
Current Engineering & Solutions Openings
We are hiring globally. All roles offer competitive cash compensation, generous founding equity, and autonomous engineering ownership.
Senior AST Invariant Engineer (Rust / Systems)
Architect core compiler-level execution gating hooks evaluated in under 35 microseconds (<35µs). You will implement zero-copy byte-range scanners, runtime AST tree modifications, and in-process sandboxes that intercept rogue tool calls before OS execution.
- Design low-latency Rust core engines integrated into Python via PyO3 and C-FFI.
- Build dynamic AST analyzers intercepting destructive bash operations, secret leaks, and eval() obfuscations.
- Optimize RFC 8785 Canonical JSON serialization and Merkle tree generation for sub-10µs overhead.
- Collaborate with NVIDIA NIM and Claude MCP ecosystem teams on native engine bindings.
- 5+ years of systems programming in Rust, C++, or modern low-level systems.
- Deep expertise in compiler construction, Abstract Syntax Trees (Tree-sitter), and interpreter hooks.
- Track record of writing zero-allocation, cache-friendly, high-throughput runtime primitives.
- Familiarity with cryptographic primitives (Ed25519, SHA-256, Merkle proofs).
Autonomous Agent Red-Team Lead (Adversarial Security)
Design and execute automated adversarial exploit harnesses across 1,000+ vector attack suites targeting autonomous agent frameworks (MCP, AutoGen, CrewAI, LangChain). You will find the zero-days before rogue actors do.
- Construct adversarial simulation suites for multi-turn prompt injection and indirect jailbreaks.
- Develop automated breakouts against MCP tool calling protocols and containerized sandboxes.
- Author technical security advisories, vulnerability disclosures, and BTP defense vectors.
- Lead customer penetration tests and independent 48-hour enterprise fleet security audits.
- 4+ years in offensive security, vulnerability research, or AI red-teaming.
- Deep understanding of OWASP LLM Top 10 vulnerabilities and autonomous tool execution escapes.
- Proficiency in Python, Bash, Docker sandboxing, and Linux namespace/seccomp security.
- Public CVEs, CTF accomplishments, or published security research are strongly valued.
Enterprise Compliance & CISO Solutions Architect
Bridge Bartholomew's deterministic execution receipts with Fortune 500 audit committees, Big 4 SOC 2 Type II auditors, and EU AI Act Article 14 regulators. You are the trusted technical advisor guiding CISOs from risk to certification.
- Guide enterprise CISOs and compliance officers through autonomous agent risk assessments.
- Map BTP cryptographic Merkle proofs to SOC 2 Type II Non-Human Identity controls.
- Produce turnkey compliance evidence packs for EU AI Act High-Risk governance (Articles 14 & 15).
- Architect enterprise SIEM telemetry pipelines (Splunk, Datadog, Sentinel) for customer fleets.
- 5+ years in Enterprise Solutions Architecture, Security Consulting, or DevSecOps sales engineering.
- Comprehensive working knowledge of SOC 2 Type II, ISO 27001/42001, and emerging AI safety regulations.
- Outstanding technical communication skills with enterprise leadership and audit partners.
- Hands-on ability to write glue scripts (Python/Go) and inspect cryptographic JSON evidence.