Security Engineer - LLM SecOps

Security Engineer - LLM SecOpsHybrid – most remotely with ability to travel to California or NY when neededMay to December (with potential extension)Video Need banking / financial services / payments experienceWe are seeking a Security Engineer specializing in LLM SecOps to join a Product Security Engineering team within a leading US-based fintech organization. This role focuses on securing AI/LLM-powered systems embedded in customer-facing and internal platforms, operating at scale in a regulated financial environment. Unlike traditional security roles, this position works directly with engineering teams to design and implement security controls within AI inference pipelines, ensuring data protection, model integrity, and real-time performance.Key ResponsibilitiesDesign and implement guardrail systems for securing LLM inputs and outputs in production environmentsSecure Retrieval-Augmented Generation (RAG) pipelines, vector databases, and embedding workflowsDevelop runtime monitoring solutions for AI systems, including prompt logging, context analysis, and response validationSecure LLM API endpoints through authentication, rate limiting, and abuse prevention mechanismsDetect and respond to AI-related security incidents using structured Root Cause Analysis (RCA) methodologiesManage AI supply chain risks, including third-party models, APIs, and plugin integrationsCollaborate closely with Product Security, Machine Learning Engineering, and Platform teams.Required QualificationsLLM SecurityExperience with prompt injection defense, jailbreak detection, and output filteringFamiliarity with OWASP Top 10 for LLM ApplicationsData & RAG SecurityKnowledge of vector database security and embedding pipeline protectionExperience with data isolation in multi-tenant environments and PII protectionMonitoring & Incident ResponseExperience with logging, anomaly detection, and SIEM integration for AI systemsStrong understanding of incident response frameworks and RCA practicesCloud & InfrastructureHands-on experience with AWS environmentsKnowledge of Kubernetes security, container isolation, and IAM/RBAC modelsExperience securing APIs using OAuth, JWT, and rate limiting techniquesEngineeringStrong proficiency in Python for automation, scripting, and security toolingPreferred QualificationsExperience in fintech, payments, or regulated financial services environmentsExposure to AI security platforms such as Lakera, Protect AI, HiddenLayer, or similar toolsRelevant certifications (e.g., AWS Security Specialty, CISSP, OSCP)Familiarity with regulatory and data protection frameworks (e.g., PCI-DSS, FCRA)Technology EnvironmentCloud: AWS (EKS, Aurora MySQL)Data Processing: Apache SparkBackend: Python, KotlinFrontend: JavaScript, TypeScript, React / React NativeSecurity & Operations: mTLS, CDN/Edge Security, SLI/SLO frameworks, RCA practices