AI Security Engineer

Role: AI Security Engineer

We are seeking a skilled AI Security Engineer to secure enterprise applications and AI-powered products across multiple engineering teams. This role demands hands-on security expertise, the ability to operate at scale, and rapid identification/remediation of risks.

Key Responsibilities

• Own security assessments for enterprise applications, products, repositories, and engineering teams.
• Perform hands-on Web, API, cloud (GCP), Kubernetes/GKE, container, and IAM security testing including vulnerability discovery/validation.
• Conduct threat modeling for AI/LLM apps, RAG systems, and agents. Identify risks like prompt injection, data leakage, poisoning, excessive permissions, and unsafe tool calls.
• Prioritize vulnerabilities based on exploitability and business impact to drive remediation with engineering teams via SDLC/CI/CD integration (SAST/DAST/SCA).
• Communicate technical findings effectively to stakeholders including executives and domain experts.

Qualifications

Mandatory:

• 3+ years in Product/App Security or Security Engineering.
• Strong expertise with OWASP Top 10, Burp Suite/ZAP, and threat modeling.
• Certified ability to find real-world vulnerabilities beyond automated scanners.
• Experience securing Cloud/Kubernetes/CI-CD environments using SAST/DAST/SCA gates.
• Practical experience with AI/LLM security (RAG, agents).

Nice-to-Have:

• GCP/GKE specific certifications or deep experience.
• Certified ethical hacker credentials: OSCP, OSWE, GIAC, CREST.