Senior AI Security Engineer

Description

The company builds software for finance teams and operates across several continents and time zones.

This senior, hands-on role owns the day-to-day security of the company's internal AI environment, from intake through production, and answers for the results.

You will co-develop the internal AI security roadmap with the AI Security Architect/Manager and make independent risk decisions for the Security team.

You will also own the metrics for internal AI security, act as the team's AI automation lead, and mentor AI Security team members as the group grows.

The role reports to the AI Security Architect/Manager and works with IT, Legal, Compliance and business leaders to help the company adopt AI safely.

Responsibilities

• Own the security of internal AI assistants, agents, connectors, tool integrations such as MCP, and AI-enabled business workflows, from intake through production.
• Set the security review standard for AI assistant and agent configurations, connectors and workflows, covering tenant controls, permissions, data sharing, retention, integrations, and custom agents and skills. Make approval decisions and define secure-by-default baselines for internal builders.
• Build and run the AI Detection and Response (AIDR) capability end to end. Monitor AI usage, detect prompt injection, tool abuse, data exfiltration and abnormal agent behavior, and connect alerts to Security Operations response.
• Lead and set the standard for reviewing new and third-party AI tools, including AI features in SaaS products, connectors, MCP servers and models, against company security policies. Handle the most complex or high-risk escalations.
• Find ways to use AI in security operations, such as alert triage, enrichment, detection engineering and vulnerability management, and lead the design and delivery of those workflows to expand the team's capacity.
• Lead threat modeling of internal AI use cases against AI attack classes, including prompt injection, jailbreaks, tool misuse, excessive agency, sensitive data leakage and AI supply-chain risk, and shape architecture decisions across IT and Engineering.
• Define, build and own the metrics program for internal AI security, and report AI security posture and progress to Security leadership.
• Turn AI acceptable use, data classification and security policies into technical guardrails, secure patterns, review checklists and training, working with IT, Legal, Privacy and business teams.
• Lead response to security incidents involving internal AI systems: investigate, contain and remediate, then feed lessons learned into controls and detections.
• Track the AI threat landscape and frontier model capabilities, and turn developments into updated controls, detections and guidance.
• Provide technical leadership and mentoring to AI Security team members, including onboarding and guiding future hires, and raise AI security capability across the Security team.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity or a related field, or equivalent experience.
• 6+ years in security engineering, security operations, application security or a related discipline, including military or government cybersecurity roles.
• At least 1, 2 years of hands-on experience securing or building LLM-based systems, such as enterprise AI assistants, agents, tool-calling and connector integrations, or retrieval-augmented workflows.
• A track record of owning a security program, capability or major initiative end to end, setting technical direction and making independent risk decisions.
• Working knowledge of AI-specific threats, including prompt injection, jailbreaks, tool abuse and data exfiltration through agents, and of the OWASP Top 10 for LLM Applications, MITRE ATLAS and the NIST AI Risk Management Framework.
• Experience reviewing SaaS security posture, identity and access controls, and least-privilege and data-sharing configurations.
• Experience running third-party and vendor security risk assessments and driving remediation with vendors and internal owners.
• Experience with detection engineering, SIEM and log analysis, and building monitoring and alerting for new data sources.
• Scripting and automation skills (Python or similar), with experience working with APIs and integrating tools and platforms.
• Strong written and verbal communication, with the ability to explain AI risk and trade-offs to technical and non-technical audiences, including security leadership and executives.
• Key skills include AI and LLM security, detection engineering and incident response, security architecture and least-privilege design, third-party risk assessment, security automation, threat modeling, security metrics, cross-functional influence, technical mentorship, and sound judgment with incomplete information.
• Preferred: leadership and cross-functional collaboration, such as leading or mentoring engineers, working with IT, Legal, Compliance and business teams toward shared outcomes, building consensus and influencing without direct authority.
• Preferred: experience administering and securing enterprise AI assistant platforms, including connector, agent and MCP server configurations.
• Preferred: experience with iPaaS and API gateways as security control points for AI connectors.
• Preferred: experience building AI-assisted security operations automation, such as LLM-driven alert triage, enrichment or SOAR workflows.
• Preferred: experience with adversarial testing or red-teaming of LLM applications and agents.
• Preferred: experience building a new security capability or function from the ground up.
• Preferred: security certifications such as CISSP, CCSP, OSCP, GIAC or AI-security-specific credentials.
• Preferred: experience in a SaaS or software company, and familiarity with SOC 2, ISO 27001 or similar compliance frameworks.

Conditions

This is a remote position.

Gross annual base salary is $131,000 - $170,000 USD. Total compensation depends on experience, skills and location, based on objective, job-related criteria. Additional variable compensation and benefits may apply.

Candidates must be legally authorized to work in the country where the position is located, without sponsorship.

Benefits

• Medical plan
• Dental and vision insurance
• Life insurance
• Short- and long-term disability cover
• Paid vacation
• Paid holidays
• Professional development
• Retirement plan