Senior Security Engineer, AI Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate and conduct threat modeling for AI-driven product features, LLM integrations, agent workflows, MCP servers, tools, plugins, retrieval systems, model outputs, and internal AI tools prior to their launch.

• Develop reusable AI security components such as guardrails, scanners, policy checks, tool-use controls, registries, sandboxes, libraries, and workflow-integrated enforcement mechanisms.

• Create security tools that can be integrated into the inference, retrieval, or execution paths to identify and mitigate prompt injection, jailbreaks, tool misuse, data leakage, unsafe code generation, and suspicious agent activities.

• Collaborate with teams that are developing AI products and platforms to establish practical security measures that align with their design, development, and deployment processes.

• Actively identify, rectify, and avert AI security vulnerabilities while ensuring that any necessary product or engineering modifications are communicated clearly and efficiently to partner teams.

• Transform isolated AI security challenges into comprehensive solutions, established protocols, measurable controls, and reusable guidance.

⛳️ Requirements

• 5+ years of experience in product security, application security, software security, security engineering, backend engineering, or security platform engineering.

• Strong foundation in application security, including secure design reviews, threat modeling, code reviews, vulnerability prioritization, and practical remediation strategies.

• Experience in developing dependable backend services.

• Practical experience in creating security automation, developer tools, libraries, infrastructure, or platform controls.

• Familiarity with AI, LLM, or agentic system risks such as prompt injection, jailbreaks, insecure tool usage, tool poisoning, data leakage, unsafe model outputs, and misuse of AI-assisted workflows.

• Capability to analyze trust boundaries, encompassing user input, model context, retrieval systems, backend services, tool calls, MCP servers, third-party integrations, sandboxed execution, logs, and frontend rendering.

• Solid understanding of infrastructure security principles including identity, authorization, network boundaries, secrets, cloud environments, containers, isolation, runtime policy enforcement, and least privilege.

• Strong engineering judgment regarding when to halt a launch, when to accept risk, and how to prioritize practical remediations.

• Effective communication skills with the ability to convey technical security risks and business implications to engineers, product managers, and leadership.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) program with employer matching.

• Generous vacation time.

• Parental leave.