Senior AI Security Engineer

This is a fully remote position, open to applicants in Florida.

📋 Description

• Manage the incident queue, risk register, and remediation backlog.

• Assign responsibilities and deadlines, uphold policies and runbooks, and communicate progress and outstanding risks to leadership.

• Lead the technical incident response process from triage to recovery validation.

• Coordinate containment efforts, preserve evidence, and engage Legal or specialized responders as required.

• Enhance identity, access, and infrastructure controls across Microsoft 365, Entra ID, AWS, and related applications.

• Collaborate with Infrastructure to ensure improvements across endpoints, servers, networks, and cloud platforms.

• Validate logging coverage, retention, alert delivery, and after-hours escalation processes.

• Utilize AI assistants for investigations, code reviews, threat analyses, and automation tasks.

• Independently verify AI findings and proposed solutions.

• Secure AI applications, agents, and MCP integrations against prompt injection, excessive permissions, data exposure, and unsafe tool actions.

• Partner with Engineering on application, API, and mobile security initiatives.

• Integrate code, dependency, and secret scanning within development workflows.

• Prioritize exploitable findings, coordinate authorized testing, and confirm remediation efforts.

• Develop security automation leveraging Python, PowerShell, APIs, or similar tools.

• Document ownership, failure alerts, audit trails, and rollback procedures.

• Evaluate vendor security, data flows, and third-party access.

• Maintain security evidence for contractual, privacy, and compliance purposes.

• Coordinate security awareness and specialist support initiatives.

• Establish clear ownership, an actionable risk backlog, reliable monitoring, tested escalation procedures, verified control closure, repeatable automation, and secure AI-assisted workflows within the first 90 days.

⛳️ Requirements

• Practical experience in security engineering, incident response, or security operations.

• Proven track record of managing security issues through investigation, remediation, and verification.

• Hands-on experience securing hybrid environments across Microsoft 365, Entra ID, AWS, endpoints, and networks.

• Ability to interpret logs and evaluate access, application permissions, and potential data exposure risks.

• Experience utilizing AI assistants in engineering or security-related tasks.

• Capability to limit permissions, safeguard sensitive information, and validate AI-generated outputs.

• Proficiency in writing scripts, working with APIs, and reviewing application code or configurations for security vulnerabilities.

• Familiarity with Git and CI/CD workflows.

• Ability to prioritize competing security tasks and coordinate with technical owners and providers.

• Strong communication skills to convey risks and decisions effectively to leadership.

• Sound judgment regarding evidence preservation, testing authorization, production changes, and involving specialists.

• Relevant certifications or a degree are appreciated, but demonstrated skills and equivalent experience are equally valued.

• Experience with Microsoft Defender or similar endpoint protection, SIEM, or managed detection services is preferred.

• Familiarity with Azure DevOps, application or API security testing, cloud or container security, or governance of AI coding tools and MCP integrations is preferred.

🏝️ Benefits

• Medical, Dental, and Vision coverage.

• Optional Accident, Hospital Indemnity, and Critical Illness insurance.

• Employee Assistance Program (EAP).

• Employer-paid Life and AD&D Insurance.

• Optional Supplemental Life and AD&D Insurance.

• Short- and Long-Term Disability Insurance.

• Flexible Spending Accounts.

• Health Savings Accounts.

• Dayforce Wallet – receive pay as you earn.

• Employee Discount program.

• Retirement Planning (401k with matching contribution).

• Pet Insurance.

• Wellness Program offerings.

• Paid Time Off, accrued per pay period based on years of service, starting at 15 days annually.

• 9 Paid Holidays each year, including 1 floating holiday.

• Direct access to leadership.

• Opportunity to influence Mercola’s dedicated Security function.

• Engaging role encompassing enterprise incident response, security automation, and AI security.