Sr AI Engineer, Security

Reference: 3148

Posted:

Location:

Austin, TXCompany:
Realtor.comSr AI Engineer, Security

Location:

Austin, TX, United States Category:
Technology Job  Now Description Recognized  as the No. 1 site trusted by real estate professionals,  has been at the forefront of online real estate for over 25 years, connecting buyers, sellers, and renters with trusted insights and expert guidance to find their perfect home. Through its robust suite of tools,  not only makes a significant impact on the real estate industry at large, but for consumers, navigating the biggest purchase they will make in their life, by providing a user experience that is easy to use, easy to understand, and most of all, easy to make decisions.

Join us on our mission to empower more people to find their way home by breaking barriers to entry, making the right connections, and building confidence through expert  is growing how it uses AI, from internal tools and coding assistants to fleets of autonomous agents. We need a security engineer whose core skill is cybersecurity and whose focus is AI. Recent incidents, like an AI model under test breaking into another company's infrastructure, show the new kinds of risk: agents acting outside their intended scope, models and tools pulled from public hubs, and normal automation becoming an attack path.

You'll make sure our systems are built to contain all of that, and that the secure option is also the easy one. You'll work closely with News Corp's global cybersecurity team, bringing AI security depth to  while aligning with group-wide standards.

We are looking for a rigorous practitioner who advocates for software engineering excellence across the full Product Development Life Cycle (PDLC). You will leverage AI through spec-driven design, automation-driven provisioning, and robust platform maintenance, eliminating ad hoc ownership and freeing solution builders to focus on workflow design and delivery.

What You'll Do:

Secure the AI platform (AWS and GCP)
Design and enforce guardrails for AI workloads on AWS (Bedrock, Lambda, IAM, KMS, SCPs, Guard Duty, Security Hub) and GCP (Vertex AI, IAM, VPC Service Controls, Org Policies, Security Command Center, Cloud KMS).Define how agents and other non-human accounts are identified and authorized: short-lived, narrowly scoped credentials, delegated user permissions, and a per-agent audit trail, so a misbehaving agent can only do limited damage.

Build containment for agents: separate read and write permissions, network egress controls, sandboxed execution, approval gates for high-risk actions, and kill switches.

Design an agent gateway or control plane that keeps agents and their tool calls within approved limits.

Secure the AI supply chain: where models come from and how they're scanned (including unsafe formats like pickle), vetting of models and datasets from public hubs such as Hugging Face, an approval process for new MCP servers and agent tools, and an inventory of the models, data, and tools each system uses (an AI-BOM).Defend against prompt injection, tool poisoning, poisoned retrieval data (RAG poisoning), and sensitive data leakage.

Put detection and logging in place for agent and model activity, and own the incident response playbooks for AI-specific events.

Review and guide what gets built

Lead threat modeling for new products, features, and internal solutions, from consumer-facing experiences to internal tools and agent workflows. Use frameworks like STRIDE, the OWASP LLM/GenAI Top 10, MITRE ATLAS, and OWASP ASVS. Turn the findings into clear design requirements and release criteria.

Review pull requests, architecture designs, and release-readiness for everything from apps to agent fleets, and make concrete suggestions that move work forward instead of blocking it.

Build paved-road frameworks, reference architectures, and secure-by-default templates that rule out whole categories of risk, instead of catching them one PR at a time.

Build security into CI/CD: secrets scanning, SAST/SCA, Git Hub Actions hardening, and policy-as-code in Terraform.

Build an ongoing red-team and evaluation program for our models, agents, and LLM apps, and test new AI features before launch.

Partner with News Corp cybersecurity

Work with News Corp's global cybersecurity team to align 's AI and cloud security with group-wide standards, policies, and risk frameworks.

Coordinate on incident response, threat intelligence, and vulnerability disclosure across News Corp businesses.

Share AI security patterns,…