Staff Information Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Connect architectural vision with operational realities by addressing conflicts between security requirements and practical implementation.

• Recommend compensating controls and assist in registering, tracking, and remediating residual risks.

• Establish preventive, default-on security measures across both cloud and enterprise environments.

• Formalize security controls as policy-as-code and infrastructure-as-code, including those governing AI tools and models.

• Implement and uphold identity and access controls, including boundaries for AI systems and non-human or agent identities.

• Collaborate with Platform Engineering and IT to ensure alignment of tools and policies with architectural standards.

• Maintain the InfoSec risk register and convert emerging threats into actionable guidance for engineering teams.

• Assist in third-party and vendor risk assessments, particularly for vendors handling data through AI pipelines.

• Automate security processes such as evidence collection, access reviews, and alert enrichment.

• Develop or manage AI-assisted security agents featuring human-in-the-loop approval gates and least-privilege credentials.

• Integrate SIEM, CSPM, DAST/SAST, and vulnerability scanning tools with LLM layers.

• Establish and enforce security requirements for AI-powered features, including model access controls, prompt-injection mitigations, output validation, and data handling boundaries.

• Execute threat modeling on agentic and LLM-based systems.

• Work collaboratively with Platform Engineering, IT, Security Champions, and external auditors.

⛳️ Requirements

• Over 5 years of experience in security engineering with proven expertise in AI/ML security, including prompt injection, model supply chain, adversarial inputs, and RAG.

• Familiarity with AI tools such as ChatGPT, Copilot, and Claude.

• Experience working with LLM frameworks and APIs such as OpenAI, Anthropic, LangChain, or similar.

• Hands-on expertise in identity and access management across modern enterprise and cloud identity stacks, including AI systems and non-human identities.

• Knowledge of infrastructure and policy-as-code tools like Terraform and OPA/Rego.

• Proficient in a scripting language for automation, preferably Python.

• Expertise in cloud security, including AWS Solutions Architect / Security Specialty or equivalent demonstrated knowledge, multi-account governance, preventive guardrails, and policy-as-code.

• Understanding of application security concepts, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC.

• Familiarity with threat modeling methodologies such as STRIDE or PASTA.

• Practical experience in building or operating AI agents.

• Experience in integrating SIEM, CSPM, SAST/DAST/SCA tools to extract actionable information.

• Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

• Willingness to travel up to 10% of the time.

🏝️ Benefits

• Discretionary bonus of 12% of annual base salary.

• Comprehensive medical, dental, and vision benefits with affordable healthcare plans and company HSA contributions, effective from Day 1.

• 6% 401(k) match.

• 20 days of Paid Time Off.

• 9 Company-Paid holidays.

• 2 paid floating holidays.

• 7 paid sick days.

• 2 Wellness days.

• 1 Paid Volunteer Day.

• PTO increases to 22 days after 3 years of service and 25 days after 5 years.

• 12 weeks of primary caregiver leave.

• 4 weeks of secondary caregiver leave.

• Accident, critical illness, and hospital indemnity insurance.

• Pet insurance.

• Legal assistance and identity theft insurance plans.

• Life insurance at 2x salary.

• Access to the Calm app.

• Employee Assistance Program.

• $65/month remote work stipend for internet.

• Opportunities for culture and team-building activities.

• Tuition assistance.

• Career development opportunities.

• Charitable contribution match up to $250 per year.

• Remote-first working conditions.

• Industry-competitive compensation and total rewards benefits.