AI Security Engineer

atAlpacaRemote

United States Full-time Cybersecurity / Security EngineerJuniorMid-level

Posted 3 days ago

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish protocols for how AI agents, bots, and automations authenticate, what they can access, and the attribution and auditing of actions.

• Oversee security requirements for the integration of AI tools, emphasizing least-privilege access and credential management.

• Develop and implement security configurations for approved AI tools, focusing on data management and access policies.

• Restrict access for agents and integrations, reviewing permissions whenever integrations are modified.

• Define security standards for internal AI applications, covering identity management, data processing, secret handling, and evaluations for new integrations.

• Design and establish guardrails for AI applications and their agents.

• Evaluate new AI applications and integrations for potential security vulnerabilities, offering actionable requirements.

• Support Security Operations in creating AI-driven tools for detection, investigation, and response efforts.

• Implement identity, data handling, and logging standards for AI tools utilized by the security team.

• Specify security logging criteria for AI systems and collaborate with Security Operations on detection strategies.

• Ensure transparency in AI tool usage and confirm compliance with approved configurations.

• Lead the management of AI-specific security incidents, including agent misuse or data breaches.

• Engage in the Security Operations on-call rotation following onboarding and cross-training.

• Transform AI security standards into actionable technical controls.

• Collaborate with GRC on AI governance, providing technical documentation for control architecture.

⛳️ Requirements

• A minimum of 2 years of experience in security engineering, application security, or cloud security positions.

• Practical experience in securing LLM applications, AI agents, or AI development tools.

• Knowledge of AI-specific risks, including prompt injection, data leakage, excessive agency, and insecure tool usage (e.g., OWASP Top 10 for LLM Applications).

• Experience with identity and access management for services and non-human identities, including OAuth, service accounts, and secret management.

• Proficiency in programming, particularly in Python or another general-purpose language.

• Familiarity with CI/CD security assessments and cloud-native deployment practices.

• Background in security operations or incident response.

• Excellent written and verbal communication skills, particularly in conveying risks to non-security professionals.

• Ability to work collaboratively across functions and make practical security choices.

• Willingness to participate in an on-call rotation.

• Experience in creating AI-assisted workflows for security operations.

• Proficient in developing security telemetry for AI systems.

• Preferred qualifications: experience securing financial, trading, or other highly regulated environments; familiarity with enterprise AI coding tools and integrations; knowledge of policy-as-code and Kubernetes; understanding of AI governance frameworks such as the NIST AI Risk Management Framework or ISO 42001; ability to balance security robustness with operational efficiency and business objectives.