Senior AI Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Act as the lead security engineering collaborator for AI product projects, guiding them from initial concept and architecture to implementation, deployment, monitoring, and ongoing support.

• Convert the product roadmap and client priorities into secure technical solutions and practical decisions regarding AI security.

• Develop, construct, and secure AI-driven applications and reusable platform capabilities, which include agents, agentic workflows, MCP servers and tools, SQL and RAG agents, model integrations, retrieval services, and customer-facing AI experiences.

• Deliver production-quality Python code, automate security processes, create reference implementations, tests, policy-as-code, and integration components.

• Establish and enforce security patterns for identity, authentication, authorization, least-privilege access tools, secrets management, tenant isolation, data classification, encryption, audit logging, telemetry, and human approval controls.

• Perform architecture evaluations and threat modeling for AI applications.

• Integrate security requirements and automated controls into GitLab CI/CD, code reviews, testing, deployment, and release processes.

• Collaborate with AI Engineering on model and application assessments, logging, telemetry, and monitoring.

• Evaluate and support the secure implementation of MCP servers, APIs, AI tools, and data connections.

• Design and create privacy-focused cloud infrastructures for AI knowledge services utilizing multi-account setups, private connectivity, firewalled egress, encryption keys, and Terraform.

• Secure knowledge graph and retrieval platforms, including graph and vector stores, governed MCP tools, authorization, and backup and restore solutions.

• Build and assess MCP servers and gateway integrations with authentication, identity propagation, tool-level access policies, and audit logging.

• Secure ingestion and embedding pipelines that integrate Confluence, Jira, GitLab, and SharePoint.

• Develop secure paved-road templates for citizen-developed and AI-assisted applications and manage platform controls.

• Mentor citizen developers in areas such as application registration, data classification, code scanning, secrets management, promotion, logging, and ensuring production readiness.

• Collaborate with Privacy, Compliance, and Legal teams to address HIPAA, HITRUST, SOC 2, GovRAMP, ISO 27001, and GDPR requirements.

• Represent Abacus in architecture and security discussions with customers.

• Provide hands-on technical assistance for design modifications, incidents, and client escalations.

⛳️ Requirements

• Minimum of 5+ years of experience in software engineering, security engineering, platform engineering, DevSecOps, application security, or a related technical field, with direct responsibility for production systems serving real customers.

• Proven experience in designing, building, deploying, or securing AI-enabled applications in production, with hands-on expertise in at least one of agents or agentic workflows, MCP, RAG, or AI application security, along with exposure to the others.

• Strong foundational knowledge of software engineering, including Python, API design and security, testing, code review, automation, deployment practices, incident response, and configuration management.

• Capability to contribute directly to application and platform implementation through coding, reusable components, security tools, CI/CD controls, technical documentation, and reference architectures.

• Experience in securing cloud-native and distributed systems, covering identity and access management, authorization design, secrets management, encryption, network and API controls, logging, monitoring, and secure data flows.

• Hands-on experience with AWS (or a similar cloud platform) security architecture, which includes multi-account organization design, service control policies, VPC and Transit Gateway networking, PrivateLink, network firewall policies, ECS Fargate, EC2, KMS, Secrets Manager, and centralized logging.

• Infrastructure as Code proficiency with Terraform, including policy scanning, OIDC-based CI/CD deployment roles, and repeatable account baselines.

• Familiarity with graph and vector data stores, preferably Neo4j and Cypher, with comparable graph or vector database experience considered.

• Practical understanding of constructing and securing MCP servers and MCP gateways, including remote server authentication, OAuth/OIDC, enterprise SSO, and audit trails.

• Experience in designing secure RAG ingestion pipelines, which involves content chunking and embedding, embedding model governance, index versioning, detection of secrets and sensitive data, and data classification tiers.

• Working knowledge of AI security risks and controls, such as prompt injection, tool misuse, excessive permissions, sensitive data exposure, insecure output handling, retrieval integrity, model and dependency risks, and auditability.

• Experience collaborating with senior engineers and technical leads during the architecture and implementation phases.

• Familiarity with reviewing third-party AI services, integrations, or connectors, including OAuth and API scope analysis, data-flow mapping, vendor security considerations, token lifecycle, data retention, and training-use terms.

• Knowledge of secure SDLC and DevSecOps practices, such as SAST, SCA, secrets scanning, threat modeling, risk acceptance, and automated deployment gates.

• Experience operating in regulated or high-trust environments, such as healthcare, with working knowledge of HIPAA, HITRUST, SOC 2, ISO 27001, GDPR, GovRAMP, FedRAMP, or similar frameworks.

• Ability to work during US Eastern Time hours, particularly core hours from 9:00 AM to 5:00 PM ET, Monday through Friday.

• A Bachelor's Degree in Computer Science, Computer Engineering, Cybersecurity, or a related field is required.

🏝️ Benefits

• Competitive leave and benefits.

• Comprehensive health coverage.

• Equity for every employee – share in our success.

• Growth-focused environment – your development matters here.