AI Security Engineer (Remote in the U.S.)

Role overview

Join a regional AI Security Services team within a larger Automation and AI practice, helping customers design, implement, secure, and operate generative AI solutions. The work spans AI governance assessments, LLM and agent security testing, shadow AI discovery, agentic workflow development, and architecture reviews for enterprise AI deployments. You will collaborate with peers across application security, cloud security, and identity and access management to deliver holistic guidance grounded in current industry frameworks.

Responsibilities

- Conduct secure configuration reviews and security assessments of enterprise AI platforms against controls covering identity, network, data protection, retention, and audit, mapped to frameworks such as OWASP LLM Top 10 and MITRE ATLAS. - Lead threat modeling exercises for AI workloads, covering prompt injection, model inversion, data poisoning, supply chain risks, excessive agency, and privilege escalation through tool chaining. - Assess AI coding tools and development environments for sandbox isolation, plugin allowlisting, secrets handling, network egress controls, and CI/CD pipeline security. - Advise client teams on securely integrating SaaS AI services and APIs, including safe handling of credentials, outputs, and user data. - Evaluate controls for data ingestion pipelines, retrieval-augmented generation architectures, and vector databases, including zero data retention, sensitivity labeling, and encryption key management. - Run shadow AI discovery engagements to inventory unsanctioned AI tool usage and assess exposure risk. - Design, build, and deploy AI agent workflows and reference architectures, including integrations with security tooling and automation platforms. - Produce engagement deliverables such as configuration review reports, findings registers, control matrices, reference architectures, and risk assessments.

Requirements

- Hands-on experience securing AI systems, including LLM platforms, AI coding assistants, and agentic frameworks. - Strong understanding of threat modeling techniques applied to AI workloads and SaaS integrations. - Familiarity with data security and privacy controls for AI pipelines, including retrieval-augmented generation and vector databases. - Ability to evaluate identity, access, DLP, SIEM, and runtime protection controls across AI platforms. - Clear written and verbal communication for client-facing deliverables, architecture diagrams, and executive-level recommendations. - Up to 10 percent travel for client engagements.

Nice to have

- Experience with AI security tooling categories such as AI Security Posture Management, AI runtime protection, or AI control plane platforms. - Prior consulting, professional services, or managed services delivery experience with direct client engagement.

Benefits and work setup

- Primarily remote workforce based in the United States, with occasional on-site or travel requirements. - Group medical insurance options including a zero-deductible PPO plan or a high-deductible health plan with HSA contributions. - Group dental insurance with employer-paid employee premiums. - Twelve corporate holidays plus a flexible time off program. - Monthly mobile phone and home internet allowance. - Retirement plan eligibility after two months at open enrollment, and an optional pet benefit.