Senior Cybersecurity Engineer – AI Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide guidance on the security posture of AI models, AI bills of materials, and SaaS agents, from pre-production scanning to post-production remediation.

• Serve as an advisory engineer for AI-BOM, AI-SPM, and AI SaaS agent security.

• Offer advice on pre-production model scanning within CI/CD pipelines, including policies that block or flag risky models and maintain a comprehensive model inventory.

• Counsel on post-production scanning of operational models and remediation of high and critical findings within established SLAs.

• Ensure that models, datasets, libraries, and dependencies associated with AI systems are properly inventoried and tracked.

• Provide guidance on SaaS agent security tools across AI platforms, including policies and a complete inventory of agents.

• Classify third-party AI SaaS applications as either approved or unapproved and create repeatable threat-modeling and security-policy programs.

• Advise on the development of a Shadow AI dashboard for discovering models, applications, agents, and MCP servers.

• Design automation workflows for data collection, investigation, and incident response.

• Develop strategies and capabilities for threat-hunting and data analysis.

• Identify technologies, methodologies, and approaches for detecting malicious activities.

• Utilize indicators to scope and proactively respond to emerging threats.

• Design, build, configure, maintain, and monitor cybersecurity threat-defense capabilities and user access management.

• Troubleshoot application-level issues in collaboration with engineering and platform teams.

• Document standards, runbooks, policies, and exceptions.

• Collaborate across teams to complete tasks and drive findings to remediation.

⛳️ Requirements

• Must be at least eighteen years of age.

• Must have legal authorization to work in the United States.

• Minimum educational requirement: high school diploma and/or GED.

• At least 3 years of work experience.

• Over 5 years of hands-on experience in data security and/or application security, including engineering and administering security tools in an enterprise environment (preferred).

• Proficient knowledge of AI and ML model development, training, packaging, and deployment, including model formats, registries, and associated risks (preferred).

• Experience in advising engineering teams on security tools and policy, including AI-BOM, AI-SPM, or similar software supply chain and posture management practices (preferred).

• Familiarity with CI/CD pipelines and release processes, including security scanning, policy gates, and security product deployment (preferred).

• Experience in troubleshooting security tools and integrations at the application level in collaboration with engineering and platform teams (preferred).

• Proven experience in building and maintaining inventories and dashboards for models, applications, agents, and APIs, with a focus on driving remediation within defined SLAs (preferred).

• Ability to work across multiple teams, demonstrating strong written and verbal communication skills (preferred).

• Excellent documentation skills, covering policies, standards, runbooks, and intake procedures (preferred).

• Capacity to leverage AI tools for scripting, analysis, documentation, and operational efficiency while ensuring data protection and accuracy (preferred).

• Preferred experience in model scanning, SaaS security posture, SBOM or AI-BOM tools, or third-party risk and threat modeling programs.

• Previous experience in leading, coaching, or mentoring team members is preferred.

🏝️ Benefits

• Remote/Virtual work arrangement.

• No travel required.