RemoteLeaf Logo
Log in Sign up

Staff Information Security Engineer - AI First

4 weeks ago
United States
Full-time
Lead
Security Engineer
Artificial Intelligence and Machine Learning
AWS Python SIEM Terraform
Apply Now
Rithum

Rithum

End to End E Commerce Solutions for Brands & Retailers | Rithum CommerceHub and ChannelAdvisor are now united as Rithum. We empower top brands, suppliers, and retailers with durable, profitable e commerce solutions. Rithum is the hottest place for free...

Internet Software & Services
$13M raised
View All Jobs 17

Description

  • Bridge security architecture and operational implementation, resolving feasibility gaps and tracking residual risks.
  • Implement preventive, default-on cloud and enterprise security controls using policy-as-code and infrastructure-as-code.
  • Enforce identity and access controls for AI systems, cloud environments, and non-human or agent identities.
  • Maintain risk tracking, monitor emerging threats, and provide actionable guidance to engineering teams.
  • Support third-party and vendor risk assessments, particularly for AI data-processing vendors.
  • Automate evidence collection, access reviews, alert enrichment, and other repetitive security workflows.
  • Build or operate AI-assisted security agents with human approval gates, least-privilege credentials, and controlled blast radius.
  • Integrate SIEM, CSPM, SAST/DAST, and vulnerability-scanning tools with LLM capabilities.
  • Define security requirements for AI features, including model access, prompt-injection mitigation, output validation, and data boundaries.
  • Threat-model agentic and LLM systems, including tool misuse, indirect prompt injection, and supply-chain risks.

Requirements

  • 5+ years of security engineering experience with demonstrated AI/ML security expertise, including prompt injection, model supply chain, adversarial inputs, and RAG.
  • Experience using AI tools and LLM frameworks or APIs such as ChatGPT, Copilot, Claude, OpenAI, Anthropic, or LangChain.
  • Hands-on expertise with enterprise and cloud identity systems, including AI and non-human identity access models.
  • Experience with infrastructure-as-code and policy-as-code, such as Terraform and OPA/Rego, plus scripting skills; Python preferred.
  • Cloud security expertise equivalent to AWS Solutions Architect or Security Specialty, including multi-account governance and preventive guardrails.
  • Knowledge of OWASP Top 10, OWASP LLM/GenAI Top 10, secure SDLC, and threat-modeling methods such as STRIDE or PASTA.
  • Practical experience operating AI agents and integrating SIEM, CSPM, SAST/DAST/SCA, or related tooling.
  • Working knowledge of SOC 2 and/or ISO 27001 frameworks.
  • Preferred: production AI-agent experience, GDPR/CCPA privacy-by-design, red teaming or adversarial ML, privileged access, key management, DLP, EDR, CASB, or security automation experience.
  • Preferred: CCSK, TAISE, AWS, or other cloud security certifications; willingness to travel up to 10%.

Benefits

  • $170,000–$220,000 annual base salary plus a 12% discretionary bonus.
  • Medical, dental, and vision coverage with company HSA contributions starting on day one.
  • 6% 401(k) match.
  • Remote-first work with a $65/month internet stipend.
  • Paid time off, company holidays, sick days, wellness days, and a volunteer day.
  • 12 weeks of primary caregiver leave and 4 weeks of secondary caregiver leave.
  • Tuition assistance, career development opportunities, wellness and mental health resources, and additional insurance programs.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Sparksoft

DevSecOps Engineer

Sparksoft 51-250 Internet Software & Services

Sparksoft is hiring a DevOps and Cloud Infrastructure professional to support government clients by managing AWS infrastructure, deployment pipelines, configuration controls, and software release activities.

United States Full-time Senior DevOps Engineer Security Engineer
Agile AWS CI/CD Git GitHub Jenkins SonarQube SVN
1 hour, 47 minutes ago
Gramian Consultancy Group

Cybersecurity & Software Engineering Specialist (AI Projects)

Gramian Consultancy Group Professional Services

Gramian Consultancy is seeking remote Cybersecurity and Software Engineering Specialists to debug code, identify vulnerabilities, improve backend systems, and provide technical insights for an AI training project.

United States Canada Mexico Costa Rica Guatemala Panama Contract Mid Level Security Engineer Software Engineer
C++ Cybersecurity Go Java Penetration Testing Python Rust TypeScript
3 hours, 2 minutes ago
teamified.com

Security Operations Engineer - PCI DSS

teamified.com Hotels, Restaurants & Leisure

A three-month contract Security Engineer will own the PCI DSS v4.0.1 compliance cycle for a cloud-hosted payments platform, implementing controls, preparing evidence, and completing executive sign-off alongside engineering and operations teams.

Philippines Contract Senior Security Engineer
AWS Encryption JIRA Penetration Testing Secrets Management SIEM
3 hours, 2 minutes ago
Trail of Bits

Senior Security Engineer Cryptography

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote Senior Security Engineer for its Cryptography practice to assess and strengthen high-assurance cryptographic software and systems for clients across technology, finance, defense, and blockchain.

United States Full-time Senior Security Engineer
$165k-$220k
C C++ Cybersecurity Git Go Rust
3 hours, 2 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers