AI Information Security Engineer

Description

The company is an exposure management firm. Over 40,000 organizations worldwide use its products to understand and lower cyber risk, including 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies.

The team builds cybersecurity products for customers and works as one group on a shared goal of excellence, respect, and belonging.

Responsibilities

• You will help set the direction for securing AI, both inside the company's products and across the wider enterprise.
• You will sit at the point where application security, cloud risk, and data governance meet, helping define how AI risk is assessed, tested, and handled.
• You will design security controls for AI systems, lead assessments, and help engineering teams release AI features safely.
• You will write security standards for responsible AI use, shape organization-wide decisions, and build tools that improve the security posture.
• Design, implement, and maintain security controls across the full AI/ML lifecycle.
• Help implement guardrails, controls, and boundary mechanisms for LLMs, SLMs, and open-source models.
• Track new AI vulnerabilities and attack methods, and use engineering depth to defend enterprise AI deployments before problems arise.
• Help write security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses.
• Put controls in place for model integrity, governance, and access control across models and feature stores.
• Build AI-driven tools that strengthen security across identity, incident management, vulnerability management, third-party risk, and emerging AI threats.
• Run AI safety and security assessments and threat models for AI/ML systems, covering data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks.
• Work with software engineers and product teams to build security into AI development, training, validation, and deployment.
• Write security guidance, documentation, and training for engineering teams, and define metrics that encourage secure behavior and results.
• Help research AI security trends and contribute ideas that support the company's AI initiatives.

Requirements

• At least 2 years of professional experience in information security or application security, with a demonstrated interest in securing AI/ML systems.
• A bachelor's degree in computer science, cybersecurity, data science, or a related field is preferred.
• Understanding of AI-specific threats such as adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks.
• Knowledge of data security methods, including encryption, masking, and tokenization.
• Knowledge of SSDLC, DevSecOps, and security testing, including SAST, DAST, SCA, and threat modeling.
• Knowledge of application security architecture, including modern web applications, Docker, and microservices.
• Ability to work across engineering, product, and business teams.
• Clear written and spoken communication, with the ability to explain complex AI security risks to technical and non-technical audiences.
• Strong problem-solving skills and attention to detail, with the ability to own projects end to end.
• Self-motivated, able to work independently and across distributed teams.
• Ideally: hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments.
• Ideally: basic coding in Python and/or Go.
• Ideally: experience with frameworks and libraries such as PyTorch, Hugging Face Transformers, TensorFlow, or similar.
• Ideally: a solid grasp of the ML/AI lifecycle and the security risks at each stage.
• Ideally: experience with application security assessment tools such as Burp Suite, ZAP, or the company WAS.
• Ideally: knowledge of cloud security on AWS, Azure, or GCP, including AI/ML services.
• Security certifications such as CISSP, CSSLP, SANS GIAC, CEH, or AI-focused certifications are a plus but not required.

Conditions

Hybrid work model.

Base pay range for US candidates: $102,500 - $136,500 USD. Final pay depends on qualifications, skills, competencies, location, and experience, and may fall outside this range.

The company provides equal opportunity and privacy notices may apply depending on your location.

Benefits

• Eligible for variable pay: commission for sales roles, bonus for non-sales roles, based on company and individual performance.
• Medical, dental, and vision coverage, disability and life insurance, and flexible spending accounts.
• 401(k) with company match and an employee stock purchase plan.
• Employee referral program and Employee Assistance Program.
• Education assistance, parental leave, paid time off, company-paid holidays, and health and wellness and community programs.