Staff Security Engineer, AI

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Establish the security standards and frameworks for the AI platform.

• Outline the principles, reference architectures, and policy-as-code that all AI tools at DraftKings must comply with, enabling multiple teams to develop agents and workflows while maintaining a uniform security standard.

• Concentrate on defining the environment, infrastructure, and authentication methods that agents depend on, rather than scrutinizing every single implementation.

• Evaluate and construct the architecture for AI gateways and tools.

• Conduct security assessments, provide sign-off, and potentially collaborate on the implementation of these systems, as well as the systems they connect with.

• Enhance the scalability of the security review process.

• Optimize the flow of AI services through InfoSec review as they progress to production, ensuring that high standards are maintained without becoming a hindrance.

• Minimize security-related disruptions driven by AI.

• Collaborate with platform and detection teams on telemetry (tool-call metrics, auditing agents based on that data) and on lightweight controls such as standardized system prompts that eliminate unnecessary investigations without impeding engineers.

• Lead remediation efforts for intricate, cross-functional security challenges. You may be called upon to assist during investigations as necessary.

• Mentor and elevate the team's capabilities. Guide security and platform engineers, lead technical and subject matter expert discussions on AI security, and enhance the overall skill set of the team in this area.

⛳️ Requirements

• Over 7 years of experience in engineering, specifically in building and managing systems in a production environment.

• More than 5 years of experience in contributing to and advising on security design.

• Comprehensive security knowledge across infrastructure and enterprise security, including endpoint protection, network security, identity management, SaaS tools, and cloud security, even if your primary expertise lies in application and product security.

• Strong hands-on capability to troubleshoot system issues.

• Proficient in writing high-quality code in both typed and untyped programming languages.

• Exceptional collaboration and communication skills — able to align engineering, platform, privacy, legal, and leadership stakeholders, with a preference for empowering teams rather than obstructing them.

• Ability to manage competing priorities and excel in a fast-paced, dynamic setting.

🏝️ Benefits

• bonuses

• equity

• benefits as applicable