Senior Security Engineer, AI Infrastructure

Accountabilities:

• Design, implement, and maintain security architectures for AI infrastructure, including model hosting environments, registries, feature stores, vector databases, and agent platforms

• Develop and enforce Identity and Access Management (IAM) frameworks for AI systems, including RBAC/ABAC policies, secrets management, and secure token lifecycle handling

• Define security guardrails for agentic workflows, including sandboxing, least-privilege access, and isolation strategies

• Build and integrate logging, monitoring, and observability pipelines for AI systems covering prompts, model outputs, tool calls, and agent actions

• Conduct threat modeling, risk assessments, and security reviews for AI platforms, models, datasets, and third-party integrations

• Collaborate with DevOps and platform teams to embed security into CI/CD pipelines, infrastructure-as-code, and deployment workflows

• Lead AI security incident response, investigations, and forensic analysis for model misuse or system compromise

• Ensure compliance with security and AI frameworks such as NIST CSF, NIST RMF, NIST AI RMF, ISO 27001, and SOC 2 Type 2

• Produce and maintain security documentation including architecture records, runbooks, SOPs, and audit-ready materials

• Provide technical mentorship and guidance to engineering teams on AI security best practices

Requirements:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field with 7+ years of relevant experience

• 5+ years of experience in security engineering, cloud security, or platform security roles

• 3+ years of hands-on experience with Kubernetes, containerized systems, or modern cloud-native infrastructure

• Strong experience with IAM, secrets management, and securing distributed service-to-service communication

• Familiarity with securing AI/ML or LLM-based systems is highly preferred

• Strong understanding of security frameworks including NIST CSF, NIST RMF, NIST AI RMF, ISO 27001, and SOC 2 Type 2

• Experience working in regulated environments or on compliance-driven security programs

• Strong technical writing skills with the ability to produce clear, audit-ready documentation

• Ability to collaborate effectively across engineering, security, compliance, and data science teams

• Strong problem-solving skills with the ability to design scalable and resilient security solutions

• Familiarity with agentic AI systems and their unique security risks is a strong plus

Benefits:

• Competitive salary ranging from $135,000 to $160,000 annually depending on experience and location

• Eligibility for discretionary bonus and equity awards

• Comprehensive medical, dental, and vision insurance plans

• 401(k) retirement plan with company match

• Flexible spending accounts for healthcare and dependent care

• Paid time off including holidays, personal days, and wellness leave

• Unlimited PTO option for eligible employees

• Company-paid life, AD&D, short-term and long-term disability coverage

• Wellness programs, mental health support, and employee assistance resources

• Additional perks including identity protection, pet insurance, legal services, and employee discounts

• Remote or hybrid flexibility depending on location.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1