Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement, configure, and oversee AI security platforms that support the Managed AI Detection and Response solution.

• Deploy tools via MDM or EDR and establish initial enforcement policies.

• Administer endpoint enforcement measures, which include software uninstallation and the removal of MCP server, shell, and database integrations.

• Preserve client-specific pre-authorization and exclusion lists to safeguard essential business tools.

• Supervise platform health, coverage, webhook delivery, and the lifecycle state of enforcement actions.

• Convert client AI acceptable use policies, data handling guidelines, and risk preferences into actionable allow, ask, and deny configurations.

• Develop and sustain enforcement baselines segmented by client, including exclusion lists and pre-authorized response measures.

• Adjust client deployments and environmental suppressions as usage trends and feature adoption change.

• Document and assess policy modifications.

• Create and refine detection and routing logic for analyst investigations and scheduled client reporting.

• Leverage Python, platform APIs, and agentic tools like Claude Code to automate onboarding, policy deployment, enrichment, reporting, and response measures.

• Act as the MDR team subject matter expert on AI risk, AI tools, and the AIDR platform stack.

• Maintain analyst runbooks, promotion-trigger guidance, and training documentation.

• Evaluate analyst escalations and identify areas for improvement and training opportunities.

• Monitor the AI threat landscape using MITRE ATT&CK, MITRE ATLAS, OWASP Agentic Top 10, and OWASP Top 10 for LLM Applications.

• Collaborate with MDR leadership and Product Engineering on the AIDR roadmap and service design.

⛳️ Requirements

• Over 3 years of experience in cybersecurity, with at least 1 year in an engineering, detection engineering, or automation role, ideally within an MDR, MSSP, or security product company.

• Practical experience with generative AI tools, AI agents, and extensions such as hooks, skills, plugins, and MCP servers.

• In-depth knowledge of risks including misalignment, unexpected behavior, prompt injection, credential exposure, and harmful skills or plugins.

• Hands-on experience in configuring policy-driven security platforms such as SIEM, EDR, SOAR, DLP, CASB/SSE, or browser and endpoint security tools.

• Proficient in scripting or programming languages such as Python or PowerShell.

• Experience with REST APIs and webhook-based integrations.

• Excellent written and verbal communication skills, with the ability to clearly articulate technical risks to analysts and clients.

• Background in mentoring, training, or reviewing the contributions of analysts or junior engineers.

• Preferred: experience in AI security and agent runtime control.

• Preferred: familiarity with OWASP Top 10 for LLM Applications, OWASP Agentic Top 10, MITRE ATT&CK, MITRE ATLAS, NIST AI RMF, or ISO/IEC 42001.

• Preferred: experience managing or securing enterprise AI assistants, LLM platforms, or agent frameworks.

• Preferred: experience with enterprise EDR, SIEM, and cloud productivity security platforms.

• Preferred: relevant security, cloud security, or AI governance certifications such as Security+, CCSP, or IAPP AIGP.

🏝️ Benefits

• Competitive salary and bonus structure.

• Flexible work arrangements.

• Generous leave policies, including three months of paid parental leave.

• Full coverage of employee-only insurance premiums (healthcare, dental, and vision).

• Up to a 5% matched 401k contribution.

• Opportunities for career growth and ongoing training.

• Participation in industry conferences and events.