Senior AI Security Engineer

Role Description

The Senior AI Security Engineer is the organizational authority on securing AI-driven technology. As end-to-end application delivery has shifted to large language model (LLM)-driven development, the traditional SDLC security model no longer applies. This role designs and enforces security across the full AI delivery surface:

• Model configuration and risk
• Prompt pipelines
• Agentic workflows
• Data ingestion and ETL
• Cloud-native infrastructure
• Identity and access controls

The AI Security Engineer embeds security into the build process itself, partners across engineering and data teams, and translates AI-specific threat knowledge into practical, enforceable controls.

The Senior AI Security Engineer is a full-time, remote, exempt position and reports to the Sr. Director, Security Architecture and Operations.

Qualifications

• Secure coding knowledge across languages commonly produced by AI-driven workflows: Python, TypeScript/JavaScript, SQL, and IaC (Terraform/Bicep).
• Strong command of identity protocols: OAuth 2.0, OIDC, SAML, SCIM, and their application to non-human identities.
• Prompt engineering sufficient to construct and evaluate adversarial prompts for testing.
• Experience with SIEM, CSPM, and runtime application security tools; ability to write detection logic and correlation rules.
• Data security controls: encryption, tokenization, DLP, and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Scripting and automation skills for building internal security tooling (Python preferred).
• Custom CI/CD security gate development — policy checks written from scratch, not scanner configuration.
• Vector database internals (pgvector, Pinecone, Weaviate) — access controls, audit logging, poisoning detection.
• Red team automation for LLMs — adversarial prompt generation and evasion testing at scale.
• Deep familiarity with AI orchestration frameworks (LangChain, LangGraph, AutoGen, Claude Agent SDK, or similar) and their security characteristics.
• Engineer programmatic agent kill-switch and rollback mechanisms triggered by behavioral thresholds.
• Track record delivering security architecture artifacts: threat models, reference architectures, security requirements, and control frameworks.
• Build secure memory and context management layers for multi-agent systems — encryption, access scoping, and TTL enforcement.

Requirements

• 8+ years of progressive information security experience across architecture, application security, identity, and data domains.
• Hands-on use of Claude for application development, including system prompt design, tool-use configuration, and multi-agent orchestration.
• Experience with the Model Context Protocol (MCP) ecosystem and securing MCP server deployments.
• Red team or adversarial AI testing experience: model evasion, adversarial examples, jailbreak research.
• Background in a regulated industry with data sensitivity requirements, healthcare a plus.
• Contributions to AI security open-source projects, published research, or conference presentations (DEF CON AI Village, Black Hat, NeurIPS).
• Demonstrated success securing AI/ML systems, LLM applications, or agentic AI platforms in a production environment.
• Demonstrated experience building or securing applications developed substantially through LLM-assisted code generation (Claude, Copilot, Cursor, or equivalent).
• Cloud-native security experience on at least one major provider (AWS, Azure, GCP), including IAM policy design, network segmentation, and secrets management.
• Demonstrated success automating adversarial testing infrastructure include jailbreak suites, prompt injection harnesses, and regression pipelines tied to model and prompt changes.
• Relevant certifications: CISSP, CCSP, OSCP, AWS/Azure Security Specialty, or emerging AI security credentials.

Benefits

• Competitive compensation
• Comprehensive benefits package for full-time employees, including medical, dental, and vision coverage
• 401(k) with company contributions and matching
• Paid parental leave
• Tuition assistance
• Generous paid time off

Company Description

DataSpring is the trusted data connector at the core of healthcare. For more than 25 years, we have powered the industry with the largest and most complete healthcare data foundation in the U.S., including more than 4.8 million provider data records sourced directly from providers and member data representing 75% of covered lives supplied by health plans. By improving how essential information flows across the system, DataSpring helps healthcare operate more efficiently, accurately, and with greater confidence.