Senior AI Security Engineer

Job Description

Senior AI Security Engineer

\n

\n

Location: New York, NY

\n

Working Pattern: Hybrid

\n

Employment Type: Full Time

\n

\n

We are partnering with a large financial services organization that is continuing to invest in its AI engineering and security capabilities.

\n

\n

They are looking for an experienced security engineer to help shape how Generative AI applications and supporting platforms are securely built and deployed across the business.

\n

\n

This is a hands on engineering role working across AI, security and platform teams. You will focus on developing practical security solutions for modern AI applications, particularly where AI systems interact with enterprise data, internal services, APIs and other applications.

\n

\n

The role offers the opportunity to influence security standards for an emerging area of technology while remaining closely involved in the engineering and implementation of those controls.

\n

\n

What You'll Be Doing

\n

\n
• 5 years of experience across security engineering, cybersecurity, application security, cloud security or security architecture.
\n
• Design and implement security patterns for Generative AI applications and supporting technology platforms.
\n
• Define how AI applications and autonomous services securely authenticate and interact with enterprise systems.
\n
• Develop authorization approaches that ensure AI services only have access to the tools, applications and information required to perform their intended functions.
\n
• Design security controls around APIs, service-to-service communication and integrations with internal systems.
\n
• Apply strong identity, access management and least-privilege principles across AI environments.
\n
• Work with engineering teams to secure AI applications that interact with internal and sensitive data.
\n
• Assess potential vulnerabilities introduced by LLM-powered applications and develop appropriate technical controls.
\n
• Address risks associated with malicious inputs, unintended data disclosure, excessive permissions and unauthorized actions.
\n
• Secure AI applications that use enterprise search, retrieval and knowledge-management capabilities.
\n
• Ensure access permissions remain appropriately enforced as information moves between source systems, retrieval services and AI applications.
\n
• Perform threat modelling and security reviews for new AI capabilities and architectures.
\n
• Develop technical safeguards that allow engineering teams to deploy AI solutions safely into production.
\n
• Improve security visibility across AI services through appropriate logging, monitoring and auditing.
\n
• Evaluate emerging AI security risks and determine where additional controls or engineering standards may be required.
\n
• Create reusable security patterns and guidance that can be adopted by engineering teams across the organization.
\n
• Partner with AI engineers, software engineers, platform teams, architects and cybersecurity specialists throughout the development lifecycle.
\n

\n

\n

What We're Looking For

\n

\n
• Significant experience within security engineering, application security, cloud security or security architecture.
\n
• Strong knowledge of identity, authentication, authorization and access management concepts.
\n
• Experience securing APIs, distributed applications and service-to-service communication.
\n
• Understanding of modern authentication and authorization technologies and enterprise identity platforms.
\n
• Experience applying least privilege and zero trust principles within large technology environments.
\n
• Strong understanding of application and platform security within cloud or distributed architectures.
\n
• Experience protecting applications and platforms that process sensitive or restricted information.
\n
• Knowledge of encryption, data protection and access control practices.
\n
• Experience conducting threat modelling and identifying potential attack paths within complex applications.
\n
• Understanding of security monitoring, logging and audit requirements within production systems.
\n
• Ability to translate security requirements into practical engineering solutions.
\n
• Comfortable working across engineering, infrastructure, architecture and cybersecurity teams.
\n

\n