[Remote] Cyber Security Engineer - AI

Note: The job is a remote job and is open to candidates in USA. An unnamed client is seeking a Senior AI Security Engineer to assess and mitigate security risks across enterprise AI services, applications, agents, and third-party tools. The role focuses on designing and implementing security controls, supporting AI governance and data protection, and enabling secure adoption of AI technologies.

Responsibilities

• Assess security risks associated with enterprise AI services, platforms, applications, and AI-enabled technologies
• Establish and implement technical security requirements for the use of generative AI, LLMs, and enterprise AI applications
• Evaluate potential risks involving sensitive information, customer records, intellectual property, credentials, and internal corporate data
• Help identify and mitigate unauthorized AI usage and shadow AI
• Assess third-party AI vendors and their security controls, data handling practices, retention settings, and integrations
• Recommend practical technical safeguards that support business innovation while reducing enterprise risk
• Assess AI applications for prompt injection, sensitive information disclosure, insecure tool usage, excessive permissions, and other AI-specific vulnerabilities
• Evaluate AI agents capable of interacting with enterprise systems, APIs, browsers, files, databases, and cloud resources
• Implement or recommend controls that restrict AI systems to appropriately authorized data, tools, and functionality
• Review security implications of model context protocols, tool integrations, plugins, connectors, and automated AI workflows
• Conduct security assessments of retrieval-augmented generation (RAG) solutions, AI applications, and AI development environments
• Establish security testing and validation procedures for AI-enabled systems
• Design and implement security controls for enterprise AI deployments
• Work with IT, Cloud, Development, Infrastructure, and Information Security teams to securely integrate AI services into the environment
• Evaluate identity, authentication, authorization, privileged access, and data access requirements for AI platforms
• Implement or recommend logging, monitoring, alerting, and audit capabilities for AI activities
• Assess AI-related integrations with existing cybersecurity technologies and enterprise identity platforms
• Develop secure configuration standards, reference architectures, and implementation guidance for approved AI technologies
• Support the investigation and remediation of AI-related security findings and incidents
• Partner with Information Security, Legal, Compliance, Privacy, and Risk Management to support enterprise AI governance requirements
• Develop technical controls designed to prevent unauthorized disclosure of sensitive company, customer, or employee information
• Evaluate AI vendor data retention, training usage, data residency, and access controls
• Support AI risk assessments and documentation necessary for internal audit and regulatory requirements
• Translate AI governance requirements into implementable technical security controls
• Help ensure AI systems are deployed consistently with applicable financial services, insurance, privacy, and information security requirements
• Monitor relevant developments in AI-specific cybersecurity threats and defensive security practices
• Research and validate new AI attack techniques and mitigation methods
• Develop internal guidance for secure AI implementation and usage
• Conduct technical testing and proof-of-concept evaluations where appropriate
• Provide recommendations to improve the organization's overall AI security maturity
• Transfer technical knowledge to existing cybersecurity and IT personnel

Skills

• 5+ years of professional cybersecurity engineering, security architecture, application security, or cloud security experience
• Hands-on experience assessing or securing enterprise generative AI applications, LLM integrations, AI agents, or comparable AI-powered systems
• Strong understanding of authentication, authorization, least privilege, sensitive data protection, and enterprise security architecture
• Practical knowledge of AI-specific risks including prompt injection, data leakage, insecure tool access, and unauthorized system interactions
• Understanding of APIs, cloud environments, identity integrations, and enterprise application security
• Experience implementing security controls, not solely conducting policy reviews or theoretical risk assessments
• Working knowledge of security testing, vulnerability management, logging, and incident response
• Familiarity with regulatory and data protection requirements in corporate environments
• Ability to explain technical risks and recommended mitigations clearly to leadership and nontechnical stakeholders
• Proven ability to work independently and coordinate with cross-functional enterprise teams
• This position is open for only W2 candidates. No sponsorship available

Benefits

• 100% remote work

Company Overview