Staff AI Security Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Develop and implement data-handling controls, code, filters, and infrastructure safeguards for internal AI tools and product AI functionalities.

• Remove sensitive information from prompts, model contexts, logs, and outputs prior to third-party model-provider access.

• Create and operationalize AI-enhanced solutions for reducing vulnerabilities, integrated with CI/CD processes.

• Identify genuine security flaws with minimal false-positive rates and suggest or implement remediation strategies.

• Publish and refine self-service secure large language model (LLM) usage patterns for engineering teams.

• Conduct threat modeling on internal AI tools for prompt injection, indirect prompt attacks, model extraction, and weaknesses at the agent-tool boundary.

• Collaborate with the red team to address findings and develop solutions and safeguards.

• Work alongside Compliance to provide auditor-facing evidence for AI-assisted controls and human review obligations.

• Share AI security expertise in areas such as vulnerability management, supply-chain risk reduction, code-owner routing, and compliance evidence initiatives.

• Set the direction for emerging LLM security tools and AI-driven workflows, making decisions on what to adopt, bypass, or develop internally.

⛳️ Requirements

• Over 10 years of experience in security and engineering, with a recent emphasis on AI/ML systems in production.

• Practical experience in deploying controls that operate on LLM inputs and outputs, including redaction, filtering, output validation, and defenses against prompt injection.

• Experience in developing and fine-tuning detection systems for personally identifiable information (PII) and sensitive data across extensive, complex datasets.

• Capability to select between regex rules, trained classifiers, and LLM detection based on factors like cost, latency, and accuracy.

• Proven ability to transition AI/security initiatives from concept to production while managing developer trust and minimizing false positives.

• Strong foundational knowledge of cloud security, particularly in Azure and AWS, including RBAC, secret management, key handling, and network egress controls.

• Skill in transforming LLM safety inquiries into reusable mechanisms such as PR-template scoring rubrics, lint rules, or approval gates.

• Proficiency in building and fortifying security tools using Python and Go.

• Familiarity with SOC 2 Type 2, ISO 27001, FedRAMP, and HITRUST evidentiary standards.

• Direct experience with agentic AI development environments such as Claude Code, Cursor, and GitHub Copilot Enterprise.

• Demonstrable history of delivering production code, showcased through a portfolio, contributions to open-source projects, or internal build records.

• Knowledge of LLM attack strategies, traditional application security (AppSec) or static application security testing (SAST), Azure OpenAI enterprise data-handling controls, LLM governance frameworks, and integration of security tools within developer workflows are advantageous skills.

🏝️ Benefits

• Unlimited paid time off.

• 12 paid holidays, including 4 global VeeaMe Days dedicated to self-care.

• 24 paid volunteer hours each year through Veeam Cares.

• Paid parental leave: 8 weeks for all parents, and 16 weeks for birthing parents.

• Medical, dental, and vision insurance beginning on your first day.

• Mental health support, therapy sessions, and digital wellness tools available through the Employee Assistance Program.

• 401(k) retirement plan with contributions matched by the company.

• Support for fertility, adoption, and surrogacy through Maven.

• AirVet: 24/7 virtual veterinary care at no cost.

• Legal services, identity protection, and supplemental health insurance options.

• Tax-advantaged spending accounts for healthcare, dependent care, and commuting expenses.

• Opportunities for learning and professional development through LinkedIn Learning, O’Reilly, mentoring, workshops, and Global Day of Learning.