Principal Security Engineer, Product – AI

📋 Description

• Take the lead on product security engineering for our payment platform, overseeing threat modeling, security architecture reviews, secure SDLC practices, and API security throughout the engineering organization.

• Enhance our AI security program by developing generative AI controls, securing machine learning pipelines, and collaborating with the Model Risk Office for model evaluations.

• Provide oversight on security architecture across our infrastructure and enterprise security domains—including endpoint, network, VPN, and corporate security controls—ensuring consistency in technical standards across all security areas.

• Influence the scalability of security engineering within the organization through the use of tools, frameworks, engagement with security champions, and building engineering partnerships.

⛳️ Requirements

• Over 10 years of experience in security engineering, showcasing technical leadership across various security domains, or a comparable blend of education and experience.

• Extensive product security knowledge encompassing threat modeling, security architecture reviews, secure code reviews, API security, authentication/authorization design, and secure SDLC practices.

• Experience with or a strong interest in AI/ML security, with an understanding of risks such as adversarial attacks, model poisoning, prompt injection, data privacy, and threats in the AI supply chain. We seek someone genuinely enthusiastic about AI technology and its security, rather than just governance.

• Comprehensive security knowledge across infrastructure and enterprise security, including endpoint protection, network security, identity management, and cloud security, even if your primary expertise lies in application and product security.

• Experience in cloud-native environments (AWS preferred) with familiarity in AI/ML services such as Bedrock and SageMaker.

• Demonstrated ability to construct security frameworks, tools, and programs from the ground up.

• Strong programming capabilities in at least one language (Python, Java, Go, or similar) with the ability to read and review code across various programming languages.

• Familiarity with security assessment methodologies and risk management frameworks.

• Working knowledge of compliance and control frameworks pertinent to financial services, including PCI DSS, SOX, SOC2, and NIST CSF.

• Ability to articulate complex security risks to both technical and executive audiences.

🏝️ Benefits

• Multiple health insurance options.

• Flexible time off – take what you need.

• Retirement savings program with company contributions and after-tax contributions.

• Equity in a publicly traded company and an Employee Stock Purchase Program.

• Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave.

• Free therapy sessions, financial and professional coaching, and legal advice.

• Monthly stipend to support our remote work model.

• Annual “development dollars” to foster our employees' growth and development.

• Through Flex First, enjoy the freedom to live and work wherever you and your family thrive.