Staff Information Security Engineer – AI First

About This Opportunity

Our talent team is representing a confidential e-commerce technology organization in a search for a Staff Information Security Engineer - AI First. This role sits at the cutting edge of information security, where AI adoption meets enterprise-grade security controls. You'll design guardrails for AI-powered products, build automated security tooling, and ensure that rapid AI innovation happens within a secure, compliant framework.

This is not a traditional security position. You'll spend equal time building infrastructure-as-code, automating workflows, and collaborating with platform engineering teams to turn manual reviews into scalable systems and vague AI risks into concrete, enforceable policies.

Responsibilities

• Bridge architectural security requirements with operational implementation; propose compensating controls and help track residual risks across the organization
• Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code and infrastructure-as-code, including controls governing AI tool and model usage
• Enforce identity and access controls to agreed standards, including access boundaries for AI systems and non-human/agent identities
• Maintain the information security risk register; translate emerging threats into actionable engineering guidance
• Support third-party and vendor risk assessments, particularly for vendors processing data through AI pipelines
• Automate repetitive security workflows including evidence collection, access reviews, and alert enrichment; build and operate AI-assisted security agents with human-in-the-loop approval gates
• Integrate security tooling (SIEM, CSPM, DAST/SAST, vulnerability scanners) with LLM layers to surface actionable insights
• Define and enforce security requirements for AI-powered features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries
• Conduct threat modeling on agentic and LLM-based systems, accounting for novel attack surfaces such as tool misuse, indirect prompt injection, and supply chain risk

What We're Looking For

Required qualifications:

• 5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs, RAG)
• Hands-on experience using AI tools (ChatGPT, Copilot, Claude, etc.) and LLM frameworks/APIs (OpenAI, Anthropic, LangChain, or similar) to accelerate your work
• Identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities
• Infrastructure and policy-as-code experience (Terraform, OPA/Rego) and scripting proficiency (Python preferred)
• Cloud security expertise: AWS Solutions Architect / Security Specialty or equivalent, including multi-account governance and preventive guardrails
• Application security knowledge (OWASP Top 10 and OWASP LLM/GenAI Top 10, secure SDLC) and threat-modeling methodologies (STRIDE, PASTA)
• Practical experience integrating security tooling (SIEM, CSPM, SAST/DAST/SCA) to surface actionable insights
• Working knowledge of SOC 2 and/or ISO 27001 control frameworks

Preferred qualifications:

• Experience building or operating AI agents in production environments
• Awareness of privacy regulation (GDPR/CCPA) as it applies to AI systems
• Red teaming or adversarial ML research background
• Experience implementing privileged-access, key-management, posture-management, or data-protection programs
• Experience with EDR, CASB, DLP, security automation, and SAST/DAST/IAST/SCA tools
• Cloud architecture or security certifications (CCSK, TAISE, AWS)

This role is remote-first within the USA and may require up to 10% travel.

How We Work With You

When you apply through Get A Job.ai, our recruiting team will conduct an initial screening to understand your background and qualifications. If there's a strong match, we'll submit your profile to our client for consideration. Please do not contact the client organization directly—all coordination will be handled through our team to ensure a smooth, professional process.

Pay

Pay via Get A Job.ai has not been disclosed for this role. Compensation details will be discussed during the screening process.

Get A Job.ai is an equal opportunity employer. We are committed to building diverse teams and providing equal employment opportunities regardless of race, religion, color, sex, gender identity, sexual orientation, age, disability, national origin, veteran status, or any other protected characteristic.