AI Platform Security Engineer

Kai is the AI company rebuilding cybersecurity for the machine-speed era. Founded by second time founders and trusted by Fortune 500 enterprises, Kai is building a future where security has no categories, no silos, and no human speed bottlenecks. The Kai Agentic Platform replaces fragmented, human-limited workflows with agentic AI systems that continuously contextualize, assess, reason, and execute security work at the speed of thought‑making human defenders, superhuman.

• Well‑funded:
  With $125M raised, we have the capital, runway, and resolve to rebuild cybersecurity from first principles.
• Proven:
  We've earned the trust of Fortune 500 and Global 1000 companies, and we're just getting started. Their confidence in Kai reflects what we've built: an AI‑powered cybersecurity platform that performs at the scale and speed the enterprise demands.
• Experienced founders:
  Our founding team consists of second‑time entrepreneurs, each with over 20 years of experience in the cybersecurity industry. Their proven expertise and vision drive our ambitious goals.
• World‑class leadership team:
  Our Heads of AI, Engineering, and Product bring extensive experience from some of the world’s most influential companies, ensuring top‑tier mentorship, direction, and vision.
• Frontier AI Applied Research Team:
  Our researchers operate at the leading edge of agentic AI systems, translating breakthrough capabilities into real‑world cybersecurity applications.
• Generous compensation:
  We offer highly competitive salaries, equity options, and a supportive work environment. Your contributions will be valued and rewarded as we grow together.

We're looking for an AI Platform Security Engineer to drive the security of the Azure infrastructure that powers the Kai AI‑native cybersecurity product. This role centers on the security of the cloud foundation, data platform, AI/ML infrastructure, and internal developer platform that the product depends on.

This is a deeply technical, infrastructure‑focused role. You'll work closely with Platform Engineering, Dev Ops, Data Engineering, and AI/MLOps teams to ensure that the systems, pipelines, and environments underpinning our product are designed, built, and operated securely.

• Own the end‑to‑end security infrastructure architecture of our Azure environment, including landing zone design, management group and subscription structure, network topology, and resource governance.
• Enforce and continuously improve guardrails using Azure Policy, Cloud security posture management (CSPM), and infrastructure‑as‑code (IaC) security scanning (Checkov, tfsec, or equivalent).
• Manage and mature the Azure network security model: hub‑and‑spoke topology, NSG and Azure Firewall rule governance, Private Endpoints, and DDoS protection controls.
• Lead cloud infrastructure security posture reviews, drive down misconfigurations, and own the organization's Secure Score improvement roadmap.
• Maintain and harden Azure landing zones, ensuring new workloads are provisioned into a secure‑by‑default environment.

• Drive the organization's cloud identity and access management strategy, including Entra t configuration, Privileged Identity Management (PIM), Conditional Access policies, and workload identity (managed identities, federated credentials, service principals).
• Enforce least‑privilege IAM across all Azure subscriptions and resources; conduct regular access reviews and entitlement hygiene campaigns.
• Architect and operate the enterprise secrets management program using Azure Key Vault with HSM‑backed keys, including key rotation automation, certificate lifecycle management, and developer‑facing secrets injection patterns.
• Define and enforce policies for human and non‑human identities across CI/CD systems, internal tooling, and AI/ML workloads.

• Secure the Azure Kubernetes Service (AKS) platform: cluster hardening, node pool configuration, admission control (OPA/Gatekeeper, Kyverno), runtime security, and network policy enforcement.
• Own container security standards: base image governance, image signing and provenance (Notary, Cosign),…