Security Engineer, VP – AI & Software Security

Security Engineer – AI & Software Security

In this role you will secure AI systems, platforms, and use cases across the firm.

• Serve as a security engineering partner for AI‑enabled applications, machine learning platforms, and data‑driven systems across Blackstone.
• Perform architecture and design reviews for AI systems, including model pipelines, inference services, data flows, and supporting cloud infrastructure.
• Conduct secure code reviews for software and services that integrate AI/LLM/ML capabilities, focusing on identifying security flaws, misuse cases, and unsafe patterns.
• Lead and execute penetration testing and adversarial testing activities for AI‑enabled applications and APIs, including abuse scenarios unique to AI systems.
• Develop and maintain threat models for AI systems, addressing risks such as data poisoning, model theft, prompt injection, insecure model deployment, and unauthorized access.
• Partner with engineering and data science teams to embed secure‑by‑design principles into AI development workflows, CI/CD pipelines, and platform services.
• Help define and standardize security controls, guardrails, and reference architectures for applied AI use cases in cloud‑native environments.
• Work with platform and cloud teams to ensure AI workloads are securely deployed using containers, Kubernetes, and managed cloud services.
• Translate complex AI security risks into clear, actionable guidance for technical and non‑technical stakeholders.
• Contribute to security risk reduction initiatives by identifying systemic AI and application security issues and driving remediation at scale.
• Assist with security incident response and investigations related to AI‑enabled systems, including post‑incident reviews and control improvements.
• Mentor and support junior engineers, helping grow security engineering capabilities across the team.
• Stay current with emerging AI security threats, industry best practices, and regulatory considerations, applying them pragmatically within the enterprise.

• A minimum of 6 years of progressive experience in software engineering or security engineering, with strong proficiency in languages such as Python, Java, Go, or similar.
• Experience performing security reviews, code reviews, and design assessments for complex software systems.
• Experience designing and building resilient, well‑documented systems that reduce operational and security risk.
• Experience working closely with application, platform, Dev Ops, and infrastructure teams to integrate security into development life cycles.
• Experience managing day‑to‑day security engineering execution, including handling requests, reviews, and remediation guidance.
• Experience in application security and cloud security, including identification and mitigation of software and infrastructure risks.
• Experience with cloud‑native architectures, with a strong preference for AWS, containers, and Kubernetes.
• Hands‑on experience with infrastructure‑as‑code (IaC) using Terraform.
• Effective communication of security risks and mitigation strategies to non‑security stakeholders.
• A minimum of 2 years of experience securing AI/ML platforms, pipelines, or AI‑enabled applications.
• Experience with threat modeling or risk assessment for data‑driven or model‑based systems.
• Experience with multi‑cloud architecture and security integration.
• A minimum of a Bachelor’s degree (or foreign equivalent) in Computer Science, Cybersecurity, Engineering, or a related field.

Expected annual base salary range: $200,000 - $225,000.

Additional compensation and benefits include comprehensive health benefits (medical, dental, vision, and FSA), paid time off, life insurance, 401(k) plan, discretionary bonuses, and potential equity and incentive compensation at Blackstone’s discretion.

Blackstone is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity or expression, disability, genetic predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other class or status in accordance with applicable federal, state and local laws.

This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, transfer, leave of absence, compensation, and training.