AI Security Engineer

Role Description

The AI Security Engineer is responsible for identifying, assessing, and mitigating security risks introduced by artificial intelligence and machine learning systems across ISC2’s technology estate. This role sits at the intersection of offensive security, application security, and data science.

• Evaluate AI/ML pipelines, large language model (LLM) integrations, and AI-powered products for adversarial threats, model vulnerabilities, and supply chain risks.
• Partner closely with the Security and Technical Operations team, engineering, and product stakeholders to embed security controls throughout the AI development lifecycle.
• Contribute directly to ISC2’s ISO/IEC 27001:2022 ISMS program and broader cybersecurity governance objectives.

This position is not available to residents of California.

Responsibilities

• Perform security assessments of AI/ML systems, including threat modeling, adversarial testing, and LLM-based applications.
• Evaluate AI/ML implementations for vulnerabilities including prompt injection, jailbreaking, model inversion, data poisoning, membership inference, and adversarial example attacks.
• Define and implement secure AI development lifecycle (AI-SDLC) standards.
• Conduct third-party AI vendor and model supply chain risk assessments.
• Partner with engineering and product teams to review AI feature designs and conduct pre-deployment security reviews.
• Monitor the evolving AI threat landscape and maintain awareness of emerging attack techniques and regulatory developments.
• Support ISC2’s ISO/IEC 27001:2022 ISMS by mapping AI risk controls to applicable Annex A requirements.
• Develop and deliver internal training and awareness content on responsible AI use and AI-specific threats.
• Contribute to ISC2’s thought leadership in AI security.
• Perform miscellaneous duties as assigned.

Behavioral Competencies

• Intellectual Curiosity: Thrives in an ambiguous, rapidly evolving domain.
• Integrity & Responsibility: Approaches AI security with a strong ethical foundation.
• Cross-Functional Influence: Able to translate complex AI risk concepts for diverse audiences.
• Adaptability: Comfortable operating without established playbooks.
• Mission Alignment: Demonstrates genuine commitment to ISC2’s mission.

Qualifications

• Familiarity with AI/ML frameworks (PyTorch, TensorFlow) and cloud-based AI services (Azure OpenAI, AWS Bedrock, Google Vertex AI).
• Working knowledge of AI governance frameworks: NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, and the EU AI Act risk categories.
• Foundation in traditional application and infrastructure security, including web application testing and secure coding principles.
• Relevant certifications preferred: CISSP, CSSLP, GWEB, GMLSC, or emerging AI security certifications.
• Demonstrated research, publication, conference presentations, or open-source contributions in the AI security space.

Education and Work Experience

• Bachelor's degree in computer science, Data Science, Cybersecurity, or a related field; will consider candidates with a high school diploma and at least seven (7) years of cybersecurity experience.
• 3+ years of experience in cybersecurity, with at least 1–2 years focused on AI/ML security.
• Experience assessing data privacy risks in AI pipelines.
• Experience with identity and access management in cloud environments is preferred.
• Experience supporting ISO/IEC 27001, SOC 2, or similar compliance programs is a plus.
• Hands-on experience with AI/ML security testing techniques.

Physical and Mental Demands

• Ability to travel up to 10% of time, may include overnight and international travel.
• Work normal business hours and extended hours when necessary.
• Remain in a stationary position for prolonged periods.
• Requires sustained concentration when analyzing AI model behaviors and producing detailed technical documentation.
• Regular use of office equipment such as a computer/laptop.
• Dexterity of hands and fingers to operate a computer keyboard and mouse.

Equal Employment Opportunity Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic as protected by applicable law.