IT Security Engineer

We are looking for Security Engineers to support Engineering Security initiatives across security and privacy reviews, threat modeling, and third-party AI Agent security testing. The selected engineers will work closely with engineering, security, privacy, and third-party teams to identify security risks, conduct hands-on assessments, and provide actionable remediation guidance.

Core responsibilities include:

• Conduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations; evaluate architecture, data flows, access controls, trust boundaries, and proposed safeguards.
• Perform threat modeling for critical services and AI agents, identifying attack surfaces, threat scenarios, potential attack paths, mitigations, and residual risk.
• Assess third-party AI agents through hands‑on adversarial security testing, including prompt injection, tool misuse, data access, permissions, external integrations, excessive agency, and sensitive‑data exposure.
• Document actionable findings, risk assessments, supporting evidence, and practical remediation guidance; partner with engineering and security teams through remediation and validation.
• Support repeatable security assessment processes, including review checklists, threat models, test cases, reporting templates, and AI-assisted/automation workflows where appropriate.