Senior AI Security Engineer

Responsibilities

We are representing a confidential AI infrastructure organization seeking a Senior AI Security Engineer to embed security into the design, development, and operation of AI products and applications. You will work directly with AI engineers, application teams, product managers, and DevOps to build practical security controls into agentic workflows, retrieval-augmented generation systems, model-serving APIs, and user-facing AI experiences.

Your core responsibilities include:

• Partner with product and engineering teams from discovery through production to define secure-by-design architectures for AI-powered services
• Threat-model LLM-enabled and agentic workflows, including prompt injection, data exfiltration, unsafe tool use, excessive agent permissions, and unintended autonomous actions
• Design secure patterns for agent identity, delegated authorization, scoped credentials, tool allowlists, approval gates, action validation, execution sandboxing, and auditability
• Secure RAG and enterprise-knowledge workflows, including document ingestion, retrieval permissions, metadata filtering, tenant isolation, and sensitive-data classification
• Define security controls for user-facing AI products, including authentication, authorization, rate limiting, abuse detection, content controls, and audit trails
• Secure model-serving and inference APIs through workload identity, API authentication, tenant-aware access controls, request validation, and usage monitoring
• Build reusable AI security guardrails, libraries, reference architectures, templates, and developer tooling that make secure implementation the default path
• Lead vulnerability management for AI application dependencies, model-serving runtimes, agent frameworks, SDKs, containers, and GPU software components
• Develop security telemetry and detections for anomalous agent actions, unsafe tool calls, unusual data retrieval, credential misuse, and policy violations
• Act as principal security liaison between AI and Applications teams and the Cybersecurity function, coordinating architecture reviews, risk acceptance, compliance evidence, and incident response

What We're Looking For

Required Experience:

• 5+ years of experience in security engineering, application security, cloud security, or platform security
• Demonstrated experience embedding security practices into software engineering or product-development teams from design through production
• Strong understanding of application security, API security, secure software development lifecycle practices, threat modeling, and vulnerability management
• Practical understanding of AI and LLM application security risks, including prompt injection, jailbreaks, insecure tool use, excessive agency, model abuse, and cross-tenant data leakage
• Experience securing agentic applications, RAG systems, vector databases, model-serving APIs, or comparable AI-enabled systems
• Experience designing identity and access controls using OIDC, OAuth 2.0, SSO, RBAC, ABAC, workload identity, and secrets management
• Strong knowledge of Kubernetes and container security, including admission controls, network policies, runtime protection, image scanning, and policy engines
• Experience with secure CI/CD, dependency governance, SBOMs, image signing, provenance, and controlled-release processes
• Proficiency in Python, Go, or similar language for automation, security tooling, and analysis
• Familiarity with cloud and infrastructure security, including logging, monitoring, incident response, encryption, and key management
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, SOC 2, CIS Controls, OWASP ASVS, or OWASP API Security Top 10

Key Competencies:

• Secure-by-design AI product and application engineering
• Threat modeling for LLM, RAG, agentic, and autonomous workflows
• Application, API, identity, and authorization security
• Agent governance, tool authorization, human-in-the-loop controls, and action auditability
• Risk-based prioritization that balances product velocity, user experience, and security requirements
• Developer enablement through reusable guardrails, secure patterns, and automation
• Strong cross-functional communication with AI engineers, product teams, platform teams, DevOps, and Cybersecurity leadership
• Ownership, sound judgment, and ability to operate effectively in a fast-moving AI product environment

Location: Sydney, Australia or Singapore

How We Work with You

Our talent team at Get A Job.ai has been engaged to identify exceptional security engineering candidates for this confidential opportunity. Here's our process:

• Submit your application through the Get A Job.ai platform
• A recruiter from our team will conduct an initial screening to understand your background and fit
• Qualified candidates will be presented to our client for consideration
• Please do not attempt to contact the client directly, as all communication is managed through Get A Job.ai to ensure a professional and efficient process

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices and encourages applications from candidates of all backgrounds. We evaluate all qualified applicants without regard to race, color, religion, sex, national origin, age, disability, or any other protected characteristic.