Note: The job is a remote job and is open to candidates in USA. An unnamed client is seeking a Senior AI Security Engineer to assess and mitigate security risks across enterprise AI services, applications, agents, and third-party tools. The role focuses on designing and implementing security controls, supporting AI governance and data protection, and enabling secure adoption of AI technologies.
Responsibilities
- Assess security risks associated with enterprise AI services, platforms, applications, and AI-enabled technologies
- Establish and implement technical security requirements for the use of generative AI, LLMs, and enterprise AI applications
- Evaluate potential risks involving sensitive information, customer records, intellectual property, credentials, and internal corporate data
- Help identify and mitigate unauthorized AI usage and shadow AI
- Assess third-party AI vendors and their security controls, data handling practices, retention settings, and integrations
- Recommend practical technical safeguards that support business innovation while reducing enterprise risk
- Assess AI applications for prompt injection, sensitive information disclosure, insecure tool usage, excessive permissions, and other AI-specific vulnerabilities
- Evaluate AI agents capable of interacting with enterprise systems, APIs, browsers, files, databases, and cloud resources
- Implement or recommend controls that restrict AI systems to appropriately authorized data, tools, and functionality
- Review security implications of model context protocols, tool integrations, plugins, connectors, and automated AI workflows
- Conduct security assessments of retrieval-augmented generation (RAG) solutions, AI applications, and AI development environments
- Establish security testing and validation procedures for AI-enabled systems
- Design and implement security controls for enterprise AI deployments
- Work with IT, Cloud, Development, Infrastructure, and Information Security teams to securely integrate AI services into the environment
- Evaluate identity, authentication, authorization, privileged access, and data access requirements for AI platforms
- Implement or recommend logging, monitoring, alerting, and audit capabilities for AI activities
- Assess AI-related integrations with existing cybersecurity technologies and enterprise identity platforms
- Develop secure configuration standards, reference architectures, and implementation guidance for approved AI technologies
- Support the investigation and remediation of AI-related security findings and incidents
- Partner with Information Security, Legal, Compliance, Privacy, and Risk Management to support enterprise AI governance requirements
- Develop technical controls designed to prevent unauthorized disclosure of sensitive company, customer, or employee information
- Evaluate AI vendor data retention, training usage, data residency, and access controls
- Support AI risk assessments and documentation necessary for internal audit and regulatory requirements
- Translate AI governance requirements into implementable technical security controls
- Help ensure AI systems are deployed consistently with applicable financial services, insurance, privacy, and information security requirements
- Monitor relevant developments in AI-specific cybersecurity threats and defensive security practices
- Research and validate new AI attack techniques and mitigation methods
- Develop internal guidance for secure AI implementation and usage
- Conduct technical testing and proof-of-concept evaluations where appropriate
- Provide recommendations to improve the organization's overall AI security maturity
- Transfer technical knowledge to existing cybersecurity and IT personnel
Skills
- 5+ years of professional cybersecurity engineering, security architecture, application security, or cloud security experience
- Hands-on experience assessing or securing enterprise generative AI applications, LLM integrations, AI agents, or comparable AI-powered systems
- Strong understanding of authentication, authorization, least privilege, sensitive data protection, and enterprise security architecture
- Practical knowledge of AI-specific risks including prompt injection, data leakage, insecure tool access, and unauthorized system interactions
- Understanding of APIs, cloud environments, identity integrations, and enterprise application security
- Experience implementing security controls, not solely conducting policy reviews or theoretical risk assessments
- Working knowledge of security testing, vulnerability management, logging, and incident response
- Familiarity with regulatory and data protection requirements in corporate environments
- Ability to explain technical risks and recommended mitigations clearly to leadership and nontechnical stakeholders
- Proven ability to work independently and coordinate with cross-functional enterprise teams
- This position is open for only W2 candidates. No sponsorship available
Benefits
- 100% remote work
Company Overview