AI Information Security Engineer

Glocomms; Berwyn (PA); On-site; USD 140,000 - 210,000; Full time

Job summary

Glocomms is partnering with a leading fintech organization to strengthen AI security across the enterprise. The role focuses on advancing security architecture, threat detection, and automation for AI-enabled platforms and cloud environments.

This senior security professional will lead security reviews, model threats, run red/purple team exercises, and mentor the security engineering team while collaborating with engineering, infrastructure, and business teams to mitigate risks and improve

Qualifications

• Experience in Security Engineering, Security Architecture, Cloud or App Security.
• Hands-on security of AI/ML apps, GenAI, or AI-enabled platforms.
• Familiarity with AWS Bedrock, Claude, Copilot, MCP integrations.
• Strong knowledge of OAuth, OIDC, delegated permissions and service accounts.
• Excellent communication and stakeholder management.

Responsibilities

• Assess and strengthen security posture using automation and offensive security.
• Design and implement security controls across cloud, application, identity, and AI.
• Lead security architecture reviews, risk assessments, and validation.
• Build monitoring, detection, and response for AI threats.
• Conduct threat modeling and red/purple team exercises.
• Develop security automation to improve visibility and control validation.
• Collaborate with engineering, infrastructure, and business teams.
• Mentor team members and contribute to strategic initiatives.

Skills

Security Engineering

Security Architecture

Cloud Security

Application Security

AI Security

Threat modeling

Red/Purple team

Security automation

Stakeholder management

Tools

AWS Bedrock

OAuth/OIDC

GitHub Copilot

MCP integrations

Job description

Glocomms is partnering with a leading fintech organization that develops technology platforms used by financial institutions, wealth management firms, and advisory businesses. As the firm continues to expand its AI capabilities, they are making significant investments in securing AI-enabled platforms, applications, and workflows. They are seeking a senior security professional to help drive AI security initiatives and strengthen the security posture of emerging technologies across the enterprise.

This individual will join a highly collaborative security engineering team focused on protecting cloud environments, AI systems, and critical business platforms through a combination of security architecture, engineering, threat detection, automation, and adversarial testing.

What You'll Be Doing

• Assess and strengthen the organization's security posture using automation, continuous validation, and offensive security techniques.
• Design and implement security controls across cloud, application, identity, and AI environments.
• Lead security architecture reviews, risk assessments, and control validation efforts for AI-enabled platforms and services.
• Build and enhance monitoring, detection, investigation, and response capabilities for AI-related threats.
• Conduct threat modeling, adversarial testing, red/purple team exercises, and security reviews of emerging AI technologies.
• Develop security automation to improve visibility, validate controls, and detect security gaps.
• Partner closely with engineering, infrastructure, and business teams to identify and mitigate security risks.
• Mentor team members and contribute to strategic security initiatives.

AI Security Responsibilities

• Secure AI platforms, agent frameworks, plugins, APIs, AI-assisted development tools, and autonomous workflows.
• Assess and mitigate risks associated with LLMs, RAG architectures, AI agents, and third-party AI solutions.
• Evaluate authentication, authorization, delegated access, service identities, OAuth/OIDC integrations, and trust relationships within AI ecosystems.
• Identify and defend against AI-specific threats including prompt injection, jailbreaking, model abuse, data poisoning, insecure outputs, and data exfiltration.
• Support the secure adoption of AI technologies across the software development lifecycle.

What We're Looking For

• Experience in Security Engineering, Security Architecture, Cloud Security, Application Security, or related cybersecurity disciplines.
• Strong knowledge of cloud environments, identity systems, application security, and enterprise security architecture.
• Hands-on experience securing AI/ML applications, GenAI solutions, LLM-based products, agent frameworks, or AI-enabled development platforms.
• Familiarity with technologies such as AWS Bedrock, Claude, Microsoft Copilot, GitHub Copilot, MCP integrations, or similar AI ecosystems.
• Strong understanding of OAuth, OIDC, workload identities, delegated permissions, service accounts, API security, and trust models.
• Experience performing security assessments, threat modeling, control validation, and risk analysis.
• Excellent communication and stakeholder management skills.

Preferred Experience

• AI red teaming or adversarial testing.
• Detection engineering, incident response, or security operations experience.
• Security automation and engineering tooling.
• Evaluation of third-party AI vendors and SaaS security risk.
• Relevant certifications such as CISSP, CCSP, GIAC, CSSLP, cloud security, or AI security certifications.