Senior AI Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement security measures for AI agents, tools, memory, and access to data.

• Establish agent identity, authorization protocols, scoped credentials, least privilege permissions, and approval processes.

• Employ secure methodologies for context retrieval, member data isolation, and agent memory management.

• Create assessments for prompt injection, sensitive data exposure, unsafe tool utilization, memory compromise, and unauthorized actions.

• Convert identified vulnerabilities into automated regression tests and release checkpoints.

• Enforce runtime protections for tool invocations, network interactions, data egress, and resource consumption.

• Evaluate agent tools, model integrations, and internal APIs for authorization, input validation, data exposure, and potential abuse risks.

• Develop logging and monitoring systems that facilitate investigations without revealing sensitive health information.

• Conduct threat modeling, manual assessments, and focused adversarial testing of AI applications.

• Collaborate with engineers to address findings and enhance product architecture.

• Contribute to reusable security libraries, reference implementations, and technical documentation.

• Assist in incident investigations related to AI systems or member data.

• Aid in refining and operationalizing Function’s standards for secure AI development.

⛳️ Requirements

• A minimum of five years of experience in software engineering, AI engineering, product security, application security, cloud security, or related fields.

• Hands-on experience in building or securing AI agents, machine learning systems, data platforms, or applications integrated with models.

• Proficient in Python and backend engineering.

• Knowledge of authentication, authorization, data isolation, secrets management, secure API design, and application security principles.

• Experience with agent tools, retrieval mechanisms, memory management, evaluations, model integrations, or AI orchestration frameworks.

• Ability to pinpoint practical attack vectors and translate them into engineering controls and testing protocols.

• Familiarity with cloud infrastructure, workload identity, containers, and service monitoring tools.

• Experience collaborating directly with product and engineering teams.

• Excellent written communication skills and the capability to document technical decisions clearly.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Flexible working hours.

• A dynamic work environment that fosters creativity and innovation.