Senior AI Security Engineer

Description

The company is a legal data intelligence firm whose AI-powered cloud platform turns large volumes of complex information into insights for high-stakes legal work such as litigation, investigations and data breach response.

Its clients include large law firms, corporations and government agencies.

The AI Security team runs a central AI security function that helps other teams adopt AI quickly and safely across the full lifecycle, working with stakeholders throughout the company.

This is a hands-on role where you lead AI security reviews, threat modeling and tooling work for agentic systems, LLM integrations and AI-assisted workflows.

The engineering work centers on distributed, cloud-native systems that process large data volumes, with AI, cloud platforms and scalable architecture in use.

You would own systems end to end across cloud and distributed environments, in a team that shares knowledge and keeps improving.

Responsibilities

• Run hands-on AI security reviews and threat models using STRIDE, MITRE ATLAS and NIST AI RMF.
• Assess and report AI risks and threats through automation, monitoring and advisory work.
• Write AI security standards, procedures and guidelines.
• Build AI security into engineering delivery and give product teams guidance and requirements.
• Propose and add safeguards to products, tools and infrastructure before they reach production.
• Evaluate, build, configure and modernize first- and third-party AI security tools, scanners, automation and agentic workflows.
• Harden AI systems and use AI to strengthen security capabilities.
• Answer customer AI security questions and support audit preparation and audit activities.
• Write and present clear reports and recommendations for technical and non-technical audiences.
• Lead engagements and manage stakeholders across distributed teams.
• Keep up with AI security developments and engineering practices, and share what you learn with internal teams.

Requirements

• A bachelor's degree in a computing, cybersecurity or information systems discipline, or equivalent experience.
• At least 5 years of paid software or security engineering work, with solid computer science fundamentals.
• At least 2 years running product security reviews and threat models with MITRE ATT&CK / ATLAS, NIST AI RMF or STRIDE.
• At least 3 years of hands-on work with cloud platforms. Azure is preferred, and AWS or GCP is acceptable.
• A track record of delivering large, cross-functional projects.
• Clear written and spoken communication, with the ability to explain complex security topics to mixed audiences.
• Strong analytical and problem-solving skills, and a proactive approach that takes ownership.
• Motivation to help teams adopt AI safely and to promote AI security best practice.
• Experience working well with geographically spread teams.
• Required skills: access management, application security, endpoint security, network security, penetration testing, security architecture design, SIEM, security operations and vulnerability management.
• Preferred: a master's degree in a computing, cybersecurity or related discipline, or equivalent experience.
• Preferred: experience in legal or e-discovery work, including litigation workflows.
• Preferred: experience in a global SaaS environment.
• Preferred: hands-on use of commercial AI tools such as Copilot, ChatGPT or Gemini, and an understanding of AI-specific attack vectors.
• Preferred: at least 1 year designing or running AI-based security capabilities and protecting autonomous AI workflows.
• Preferred: proficiency in one modern object-oriented programming language, such as C, Python or Java.
• Preferred: certifications such as Microsoft Certified: Azure Security Engineer Associate (AZ-500).

Conditions

The role is hybrid.

The expected base salary range is $130,000 to $195,000.

Final pay depends on experience, skill set, qualifications and internal pay equity. Offers at the top of the range are not typical, to leave room for future salary growth.

Benefits

• Competitive benefits, DTO, parental leave and an equity program.
• Total compensation includes an annual performance bonus and long-term incentives.