[Remote] Lead AI Security Engineer

Note: The job is a remote job and is open to candidates in USA. SoTalent is a professional services company seeking a Lead AI Security Engineer to drive the security strategy, architecture, and operational resilience of enterprise AI platforms. The role leads threat modeling, security architecture reviews, adversarial testing, cloud-native security, risk management, governance, and compliance efforts while advising technical and executive stakeholders.

Responsibilities

• Own and oversee the end-to-end security posture of enterprise AI and intelligent automation platforms
• Define security architecture standards, policies, and controls for AI applications and services
• Establish security best practices that support secure development, deployment, and operation of AI solutions
• Provide technical leadership on AI security strategy and platform risk management
• Conduct comprehensive threat modeling exercises for AI systems, cloud services, APIs, and infrastructure
• Identify, assess, and prioritize security risks associated with AI workflows, data pipelines, and model deployment processes
• Develop mitigation strategies that address both traditional cybersecurity risks and AI-specific attack vectors
• Lead security reviews throughout the software and platform development lifecycle
• Design and implement security controls for cloud-native platforms and distributed environments
• Secure containerized workloads, orchestration platforms, and cloud infrastructure services
• Ensure strong identity, access management, and workload authentication practices across environments
• Collaborate with engineering teams to strengthen infrastructure resilience and operational security
• Lead penetration testing, security assessments, and red-team exercises focused on AI and platform technologies
• Validate security controls through adversarial testing and simulated attack scenarios
• Identify vulnerabilities across infrastructure, applications, APIs, and deployment pipelines
• Drive remediation efforts and continuous improvement initiatives following security assessments
• Establish controls that protect software supply chains, deployment pipelines, and third-party dependencies
• Evaluate platform components for security, integrity, and operational risk
• Implement automated security validation and governance mechanisms throughout the development process
• Support secure software delivery practices and dependency management programs
• Ensure security programs align with industry standards, governance frameworks, and regulatory requirements
• Support audits, compliance reviews, risk assessments, and security certification activities
• Develop security documentation, control frameworks, operational procedures, and risk reporting mechanisms
• Partner with legal, compliance, and governance teams on security-related initiatives
• Act as the primary security advisor for strategic AI platform initiatives and client engagements
• Communicate security risks, recommendations, and architectural decisions to both technical and executive audiences
• Build trusted relationships with internal stakeholders and external partners
• Support highly regulated environments requiring rigorous security and compliance controls

Skills

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline
• Minimum 10+ years of experience in Security Engineering, Cloud Security, Cybersecurity Architecture, or related fields
• Extensive experience designing and securing cloud-native platforms and distributed systems
• Deep understanding of infrastructure security, container security, and modern security architectures
• Experience performing threat modeling, risk assessment, and security architecture reviews
• Strong background in offensive security, penetration testing, and adversarial security assessments
• Experience supporting regulated environments with complex compliance requirements
• Excellent communication, leadership, and stakeholder management skills
• AI Security
• Threat Modeling
• Cloud-Native Security
• Kubernetes Security
• Container Security
• Infrastructure Security
• Workload Identity Management
• Penetration Testing
• Offensive Security
• Security Architecture
• Policy as Code
• Software Supply Chain Security
• DevSecOps
• Security Automation
• Zero Trust Architecture
• Cloud Security Governance
• Vulnerability Management
• Risk Management & Compliance

Benefits

• Remote work setting

Company Overview