Lead Engineer – AI Security

• Collaborate with AI platform, product, and engineering teams to evaluate the security posture of AI systems throughout their lifecycle
• Define and evaluate security assessment methodologies, testing frameworks, and assurance standards for AI technologies
• Develop and execute security validation strategies, including threat modeling, attack simulation, and adversarial testing
• Conduct deep technical reviews of AI products, platforms, and architectures
• Partner with engineering teams to validate secure deployment patterns for AI workloads across cloud and hybrid environments
• Assess AI architectures, models, agents, and supporting infrastructure for security risks, vulnerabilities, and design weaknesses
• Evaluate security controls, guardrails, and mitigations protecting AI applications and platforms
• Perform hands-on security analysis and testing of complex AI-enabled systems
• Recommend risk mitigation strategies and prioritized remediation plans
• Provide expert guidance on model security, prompt injection defenses, agent security, supply chain security, and data protection
• Prioritize high-impact security improvements that reduce risk while enabling innovation and business objectives
• Identify emerging AI-specific threats, attack techniques, and vulnerabilities and communicate business impact
• Collaborate with security, architecture, and engineering teams to improve AI security controls and governance
• Assess and communicate security risks to stakeholders while balancing technical realities and business priorities
• Serve as a trusted advisor on AI security across the enterprise

• 4-year degree or equivalent experience
• Software developer comfortable in several programming languages across different platforms
• 7+ years of hands-on experience in technology
• Deep knowledge of multiple cybersecurity domains including Information Protection, Cloud Security (GCP strongly preferred), Networking Security, IAM, Automation, and SIEM
• LLM Security expertise, including RAG, MCP, input validation, and sandboxing
• In-depth understanding of OWASP Top 10 for Large Language Model Applications
• Solid understanding of AI and ML
• Understanding of prompt injection and its various styles, including direct, indirect, and RAG poisoning
• Knowledge of MCP authentication patterns including dynamic client registration
• Knowledge of RAG authorization patterns
• Experience mitigating the security risks of local coding agents
• Solid understanding of containerization technologies and tools
• Excellent written and verbal interpersonal skills with strong presentation abilities
• Proven history of utilizing a variety of security tools and technologies across diverse environments
• Good understanding of security management workflows in large enterprise organizations and complex environments
• Good understanding of the current threat landscape and organizational challenges
• In-depth knowledge of security frameworks, standards, and best practices, such as NIST and ISO/IEC 27001
• Strong understanding of network security, cryptography, and secure software development
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, and DLP
• Excellent analytical, problem-solving, and communication skills
• Preferred: GCP native security product experience
• Preferred:
  Commercial security product experience
• Preferred: LLM Security expertise
• Preferred:
  Vertex AI experience
• Preferred: AWS or Azure experience

Demonstrates expertise in AI security, including threat modeling, attack simulation, and security validation strategies. Proficient in evaluating security controls and mitigating risks in AI systems across cloud and hybrid environments.

• AI Security Expertise
• Cloud Security (GCP Preferred)
• Cybersecurity Domains Knowledge
• Security Frameworks and Standards (NIST, ISO/IEC 27001)
• Hands-On Security Analysis

• Programming Languages
• Cybersecurity
• Threat Modeling
• Adversarial Testing
• OWASP Top 10
• Containerization Technologies
• Network Security
• Cryptography
• Secure Software Development
• Risk Mitigation Strategies

• Excellent Communication Skills
• Analytical Skills
• Problem-Solving Skills
• Interpersonal Skills
• Presentation Abilities

• Information Protection
• Cloud Security
• IAM
• Automation
• SIEM
• Security Management Workflows
• Current Threat Landscape
• AI and ML

• Firewalls
• IDS/IPS
• SIEM
• DLP
• GCP Native Security Products
• Commercial Security Products
• Vertex AI
• AWS
• Azure