This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
At JFrog, we’re reinventing DevOps to help the world’s greatest companies innovate – and security is a core part of our mission. Our team of industry-leading software security experts are true pioneers, constantly pushing the boundaries with original research and technology innovation. JFrog is a special place with a unique combination of brilliance, spirit and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software.” Wouldn't it be amazing if you could join us on our journey?
Job Responsibility
Build AI-powered supply chain intelligence - LLM systems that reason over artifacts, dependencies, and release signals to move past static block/allow rules toward decisions a senior engineer would make
Build and secure AI agents that operate against registries, pipelines, and deployment systems. Extend JFrog's controls to the AI artifact stack we ship today - MCP Registry, Agent Skills Registry, AI Catalog - and design the next generation of governance models
Build AI woven across the platform - versioning, security, and provenance for AI artifacts, and capabilities that make developers faster wherever speed, trust, or judgment can be amplified
Build evaluation and measurement - benchmarks and pipelines that prove AI-powered approaches actually outperform traditional ones
Build technology scouting and signal analysis - evaluate new AI frameworks and security innovations as they emerge
Requirements
7+ years building distributed systems (or equivalent depth) - you've shipped production software, not just prototypes
Hands-on with AI/ML systems -you've built something real with LLMs, embeddings, RAG, or agent frameworks (LangGraph, LangChain, Claude API, OpenAI API, or similar). You understand prompt engineering, context windows, token economics, evaluation, and failure modes
Strong coding in Python and/or Go - clean, fast working code. Prototypes that demo, with a clear sense of where shipping begins
Judgment under ambiguity - you can take a hard, open question and come back with a working prototype and data. You'll kill your own project when the evidence says it doesn't work, and you'll be proud of what you learned
Nice to have
Experience building AI agent systems - tool use, function calling, MCP, multi-step reasoning, sandboxing, and the security/governance of giving agents access to real infrastructure
Hands-on with MLOps or ML model management - model registries, versioning, serving, monitoring, or security scanning
Background in DevSecOps, supply chain security, or compliance - SBOMs, Sigstore, SLSA, OPA/Rego, DORA, FedRAMP, or package ecosystem internals (npm, PyPI, Maven, Go modules, Docker)
Familiarity with JFrog's platform (Artifactory, Xray, Curation, AI Catalog, JFrog ML, JFrog CLI)
Prior work in a research lab, innovation team, or early-stage startup where you built zero-to-one
What we offer
Real problems at real scale - billions of artifacts, thousands of enterprise customers, and an AI transformation that's just getting started
Freedom to pick the right tool for the job - Claude, GPT, open-source models, fine-tunes, or classical ML. No vendor lock-in
A small team of senior peers who push back on your ideas and make them better