AI Security Engineer (AI & Agentic Security)

Strategic Systems International; Argentina; Remote; ARS 136,430,000 - 197,065,000; Full time

Job summary

Strategic Systems International seeks an experienced AI Security Engineer to secure enterprise AI initiatives, from internal chatbot pilots to agentic workflows with tool access. You will blend software engineering with security policy design to enable safe AI adoption across multi-cloud environments.

The role requires hands-on Python and GenAI security expertise, policy-as-code delivery, and experience in cloud security, IAM, and regulatory compliance.

Qualifications

• Strong SWE with 5+ years of experience and Python proficiency.
• 3+ years in AI/ML or GenAI security or equivalent infosec with AI focus.
• Ability to write security policy that is testable and enforceable (policy-as-code, CI/CD gates, DLP rules).
• Track record of self-directed learning on fast-moving tech topics and security risk analysis.
• Familiarity with AI security risks: prompt injection, unsafe outputs, tool-use abuse, identity misuse.
• Hands-on with AI security frameworks: NIST AI RMF, MITRE ATLAS, OWASP LLM/Agentic Top 10.
• Experience in cloud security across two of AWS/GCP/Azure including native AI/ML tooling.
• IAM fundamentals—OAuth 2.0/2.1, OIDC, mTLS; interest in non-human/workload identity.
• Experience in regulated industries (HIPAA or equivalent).
• Strong technical writing to translate vendor risk into actionable controls.

Skills

Python

AI security

Policy-as-code

CI/CD gates

DLP rules

Security policy writing

Self-directed learning

Cloud security

IAM (OAuth/OIDC/mTLS)

HIPAA/compliance

Technical writing

Tools

Kong AI Gateway

Azure APIM GenAI Gateway

Apigee

Bedrock Guardrails

Vertex AI security

Job description

AI Security Engineer — AI & Agentic Security

We are seeking an experienced, hands‑on, AI Security engineer / developer, to support our Enterprise AI Security Program. Our AI landscape spans everything from internal chatbot pilot to a full agentic workflow with tool access, Code Assistant rollout to thousands of developers to new Agentic platform. Externally, the tools and protocols worth worrying about change every few months. You'll be the person who can look at both ends of that spread ensuring safe and secure adoption of AI.

Required:

• Strong SWE, with 5+ years of experience; proficiency in Python (or equivalent)
• 3+ years in AI/ML or GenAI security (prompt injection defense, unsafe output handling, tool-use abuse, data leakage), or equivalent hands‑on infosec experience with a demonstrated pivot into AI security
• Demonstrated ability to write security policy that is specific and testable, and to translate it into automated enforcement (policy‑as‑code, CI/CD gates, gateway‑level controls, DLP rules) rather than a document that relies on voluntary compliance
• A track record of self‑directed learning on fast‑moving technical topics — comfortable digging into how a brand‑new tool, protocol, or framework actually works (architecture, trust boundaries, auth model) well enough to give a defensible security opinion on it within days, not months
• Working knowledge of AI/LLM security risks: prompt injection, jailbreaking, unsafe outputs, tool‑use abuse, identity misuse, agentic workflow escalation
• Hands‑on familiarity with AI security frameworks: NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10 / OWASP Agentic Top 10
• Experience with cloud security across at least two of AWS, GCP, and Azure, including native AI/ML security tooling (Bedrock Guardrails, Vertex AI floor settings, Azure AI Content Safety)
• Identity and access management fundamentals — OAuth 2.0/2.1, OIDC, mTLS — with interest in or exposure to non‑human/workload identity (SPIFFE/SPIRE) and agent identity models
• Experience in a highly regulated industry (healthcare, financial services) with HIPAA or equivalent compliance obligations
• Strong technical writing — you can turn a vendor capability gap or a new tool's risk profile into a control requirement someone else can implement and test

Preferred:

• Direct experience with MCP (Model Context Protocol) or A2A protocol security, or with AI gateway products (Kong AI Gateway, Azure APIM GenAI Gateway, Apigee)
• Exposure to AI‑native runtime security platforms (Straiker, Palo Alto Prisma AIRS, Virtue AI) or classic content guardrail products
• Familiarity with shadow‑AI / BYOAI risk — e.g., locally‑run autonomous agent frameworks (OpenClaw and similar), unsanctioned browser extensions, personal AI accounts used for work — and how to discover and govern them at scale (CrowdStrike Falcon, Wiz, CASB, or similar)
• AI red‑team tooling experience (PyRIT, Promptfoo, AgentDojo, or custom harnesses)
• Familiarity with Microsoft Purview DSPM for AI or equivalent DLP-for-AI tooling
• Relevant certification (CAISP, ISACA AAISM) or equivalent demonstrated skill
• Experience with detection engineering, SIEM integration, and telemetry design for AI/agent behavior

Originally posted on Himalayas