Senior AI Security Engineer

Responsibilities

We are representing a confidential AI infrastructure organization seeking a Senior AI Security Engineer to embed directly within product and application teams. You will work alongside AI engineers, product managers, and DevOps teams to build practical security controls into AI-powered products and services from design through production.

Your day-to-day will include:

• Partnering with product and engineering teams to define secure-by-design architectures for AI-powered applications and services
• Threat-modeling LLM-enabled and agentic workflows, including prompt injection risks, data exfiltration, unsafe tool use, excessive agent permissions, and unintended autonomous actions
• Designing secure patterns for agent identity, delegated authorization, scoped credentials, tool allowlists, approval gates, action validation, execution sandboxing, and auditability
• Securing RAG and enterprise-knowledge workflows including document ingestion, retrieval permissions, metadata filtering, tenant isolation, and sensitive-data classification
• Defining security controls for user-facing AI products including authentication, authorization, rate limiting, abuse detection, content controls, and conversation-data handling
• Securing model-serving and inference APIs through workload identity, API authentication, tenant-aware access controls, request validation, and usage monitoring
• Building reusable AI security guardrails, libraries, reference architectures, templates, and policy-as-code that make secure implementation the default path
• Leading vulnerability management for AI application dependencies, model-serving runtimes, agent frameworks, SDKs, APIs, containers, and GPU software components
• Developing security telemetry and detections for anomalous agent actions, unsafe tool calls, unusual data retrieval, credential misuse, and policy violations
• Acting as the principal security liaison between product teams and the broader cybersecurity function

What We're Looking For

Required Experience:

• 5+ years in security engineering, application security, cloud security, or platform security
• Demonstrated experience embedding security practices into software engineering or product-development teams
• Strong understanding of application security, API security, secure SDLC practices, threat modeling, and vulnerability management
• Practical understanding of AI and LLM application security risks including prompt injection, indirect prompt injection, jailbreaks, insecure tool use, excessive agency, model abuse, and sensitive-data exposure
• Experience securing agentic applications, RAG systems, vector databases, model-serving APIs, or comparable AI-enabled systems
• Experience designing identity and access controls using OIDC, OAuth 2.0, SSO, RBAC, ABAC, workload identity, and secrets management
• Strong knowledge of Kubernetes and container security including admission controls, network policies, runtime protection, and image scanning
• Experience with secure CI/CD, dependency governance, SBOMs, image signing, and controlled-release processes
• Proficiency in Python, Go, or similar language for automation and security tooling
• Familiarity with cloud security, logging, monitoring, incident response, encryption, and multi-tenant security controls
• Knowledge of security frameworks such as NIST, ISO 27001, SOC 2, CIS Controls, OWASP ASVS, or OWASP API Security Top 10

Key Competencies:

• Secure-by-design AI product and application engineering
• Threat modeling for LLM, RAG, and agentic workflows
• Agent governance, tool authorization, and human-in-the-loop controls
• Risk-based prioritization that balances product velocity with security requirements
• Developer enablement through reusable guardrails and clear documentation
• Strong cross-functional communication with engineering, product, DevOps, and compliance stakeholders
• Ownership, sound judgment, and ability to operate in fast-moving AI product environments

How We Work With You

Our talent team at Get A Job.ai will guide you through the entire process. You'll apply directly through our platform at getajob.ai, where one of our recruiters will conduct an initial screening to understand your background and match you with the right opportunity. Once we've confirmed mutual fit, we will submit your profile to our client for consideration.

Please note: candidates should apply exclusively through Get A Job.ai and should not contact the client organization directly during the recruitment process.

This position is based in Sydney, Australia, with potential flexibility for candidates in Singapore.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to providing equal employment opportunities to all qualified candidates regardless of race, color, religion, sex, national origin, age, disability, or any other protected characteristic under applicable law.