AI Security Engineer – GRC

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluation of AI Vendors & Technologies

• Provision of Secure AI Implementation Guidance for Development Teams

• Management of AI Risks & Compliance

• Reviews of Security Integration

• Training, Awareness & Policy Development

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a closely related field

• Over 7 years of progressive experience in information security, including at least 2 years concentrated on AI/ML security or the evaluation of applied AI technologies

• Proven hands-on experience with one or more of the following: Copilot Studio, Azure AI Foundry, Claude / Anthropic APIs, OpenAI API, GitHub Copilot, or LLM agentic frameworks (LangChain, AutoGen, Semantic Kernel)

• Experience in a HIPAA-regulated environment; a background in the healthcare industry is highly preferred

• A strong history of conducting vendor risk assessments and creating executive-level risk documentation

• In-depth understanding of the LLM attack surface, including prompt injection, indirect prompt injection, system prompt extraction, and model manipulation

• Familiarity with AI red-teaming methodologies and tools (Garak, PyRIT, PromptBench)

• Knowledge of OWASP Top 10 for LLM Applications

• Capability to audit and secure Model Context Protocol (MCP) server implementations

• Experience in securing AI CLIs, encompassing credential storage, environmental variable exposure, and shell integration risks

🏝️ Benefits

• Annual employee bonus program

• Comprehensive Wellness Program

• Generous paid-time-off (PTO)

• 11 paid holidays annually, 1 floating holiday, birthday off, and 2 days for volunteering

• Excellent 401(k) Retirement Saving Plan with employer matching

• Robust employee recognition program

• Tuition reimbursement