Security Engineer - AI Enablement

At Trustly, we're building a smarter, faster, and more secure financial future by revolutionizing the world of payments. As a global leader in Open Banking Payments, we are establishing Pay by Bank as the new standard at checkout, providing unparalleled freedom, speed, and ease to millions of consumers and merchants worldwide.

Our Ambition:
To build the world's most disruptive payment network and redefine what the payment experience should feel like.

Trustly is a global team of innovators, collaborators, and doers. If you are driven by a strong sense of purpose and thrive in a dynamic, entrepreneurial, and high‑growth environment, join us and be part of a team that's transforming the way the world pays.

Trustly's Security & IT team protects the integrity, availability, and confidentiality of our systems and data globally – and is at the forefront of securing Trustly's AI‑native transformation. As Trustly deploys LLMs, agentic systems, and MCP implementations across its engineering and product organization, the Security team plays a critical and novel role: ensuring these AI systems are built, deployed, and governed safely and in line with Trustly's risk posture.

As a Staff AI Enablement Security Engineer, you will be one of two senior security ICs specifically aligned to Trustly's AI transformation – focused on securing Claude, MCP implementations, and the broader agentic AI tooling that Trustly is deploying internally and within its products. You'll define the security standards and controls for AI systems, work hands‑on with the AI Enablement team to assess and mitigate risk, and build the tooling and frameworks that allow Trustly to move fast with AI without compromising security.

• Own security assessment and risk management for Trustly's AI and LLM systems – including Claude, MCP server implementations, agentic workflows, and AI‑assisted developer tooling
• Define and implement security controls, access governance, and monitoring frameworks for AI systems – covering prompt injection, data leakage, model misuse, and agentic system abuse scenarios
• Partner closely with the AI Enablement team to embed security from the start of AI feature development – conducting threat modeling, reviewing architectures, and advising on safe deployment patterns
• Build and maintain tooling for AI‑specific security monitoring – detecting anomalous model behavior, unauthorized data access, and policy violations in real time
• Develop and maintain AI security standards, guidelines, and training resources for engineering teams across Trustly – making it easy for engineers to build with AI safely
• Stay at the leading edge of AI security research – tracking emerging attack vectors, defensive techniques, and regulatory developments relevant to LLM and agentic system security

• 8+ years of security engineering experience, with at least 2‑3 years focused on AI/ML security, LLM security, or security for data‑intensive systems
• Deep, hands‑on understanding of the AI security threat landscape – prompt injection, jail breaking, data poisoning, model exfiltration, insecure agentic tool use, and MCP‑specific attack surfaces
• Strong security engineering fundamentals – experienced in threat modeling, secure design review, penetration testing, and building security monitoring infrastructure
• Familiarity with MCP (Model Context Protocol) architecture, LLM orchestration frameworks, and agentic AI deployment patterns – you can reason about security at the level of individual tool calls and context windows
• Track record of operating at Staff+ IC scope – driving security decisions that span multiple teams, influencing architecture through technical credibility rather than authority
• Excellent communicator – able to explain novel AI security risks clearly to both technical and non‑technical audiences, and to earn trust with engineering teams as a partner rather than a gatekeeper

Applications for this role are accepted on an ongoing basis.

This is a hybrid role based in our San Francisco hub. We look for team members to be in the office Tuesday through Thursday.