Staff Information Security Engineer – AI First

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as a liaison between architectural vision and operational execution by balancing security requirements with feasible implementation strategies.

• Suggest compensatory controls while recording, monitoring, and addressing residual risks.

• Deploy preventive security measures that are default-on across both cloud and enterprise settings.

• Encode security protocols as policy-as-code and infrastructure-as-code.

• Oversee the governance of AI tools and models through enforced security measures.

• Establish and uphold identity and access controls, including boundaries for AI systems and non-human/agent identities.

• Manage the InfoSec risk register and convert emerging threats into practical engineering directives.

• Assist in assessing third-party and vendor risks, particularly for AI-pipeline providers.

• Automate security processes such as evidence collection, access reviews, and alert enrichment.

• Develop or manage AI-assisted security agents with human approval checkpoints and least-privilege access.

• Integrate SIEM, CSPM, DAST/SAST, and vulnerability scanners with LLM layers.

• Define and enforce security requirements for AI features, including model access controls, prompt-injection defenses, output validation, and data handling constraints.

• Perform threat modeling for agentic and LLM-driven systems.

• Collaborate with Platform Engineering, IT, Security Champions, and external auditors.

• Operate independently while balancing the demands of security research with rapid delivery timelines.

⛳️ Requirements

• Over 5 years of experience in security engineering with a strong focus on AI/ML security, including knowledge of prompt injection, model supply chain, adversarial inputs, and RAG.

• Familiarity with AI tools like ChatGPT, Copilot, and Claude.

• Experience with LLM frameworks and APIs, including OpenAI, Anthropic, and LangChain.

• Hands-on expertise in identity and access management across modern enterprise and cloud identity solutions, including AI systems and non-human identities.

• Experience with infrastructure-as-code and policy-as-code, particularly with Terraform and OPA/Rego.

• Proficient in a scripting language for automation, with Python as the preferred option.

• Expertise in cloud security, including AWS Solutions Architect / Security Specialty or equivalent demonstrated proficiency.

• Experience managing multi-account governance, preventive guardrails, and policy-as-code.

• Knowledge of application security, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC practices.

• Experience with threat modeling methodologies such as STRIDE, PASTA, or similar frameworks.

• Practical experience in building or operating AI agents.

• Familiarity with integrating SIEM, CSPM, SAST/DAST/SCA security tools.

• Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

• Willingness and ability to travel up to 10% of the time.

• Preferred: Experience with AI agents in production, GDPR/CCPA and DPIAs, red teaming or adversarial ML research, privileged access management, key management, posture management, data protection, EDR, CASB, DLP, IAST, CCSK, TAISE, or AWS certifications.

🏝️ Benefits

• Comprehensive medical, dental, and vision plans with affordable healthcare options and company HSA contributions starting from Day 1.

• 6% 401(k) match.

• 20 days of Paid Time Off.

• 9 Company-Paid holidays.

• 2 paid floating holidays.

• 7 paid sick days.

• 2 Wellness days.

• 1 Paid Volunteer Day.

• PTO increases to 22 days after 3 years of service and 25 days after 5 years.

• 12 weeks of primary caregiver leave.

• 4 weeks of secondary caregiver leave.

• Accident, critical illness, and hospital indemnity insurance.

• Pet insurance.

• Legal assistance and identity theft insurance plans.

• Life insurance equal to 2x salary.

• Access to the Calm app.

• Employee Assistance Program.

• $65/month remote work stipend for internet expenses.

• Opportunities for culture and team-building activities.

• Tuition assistance.

• Career development opportunities.

• Charitable contribution matching up to $250 per year.

• Discretionary bonus of 12% of annual base salary.

• Remote-first working environment.

• Comprehensive benefits and wellness plans.

• Competitive compensation and total rewards package.