AI Risk Engineer

Bright Vision Technologies; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is hiring an AI Risk Engineer to design and implement security controls for AI systems and ML pipelines. You will address prompt injection, data exfiltration, and supply chain risks, shaping defenses for both AI-powered apps and underlying infrastructure.

The ideal candidate has extensive security engineering experience with AI/ML, strong cryptography and cloud security knowledge, and hands-on experience building robust guardrails and detection capabilities.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related discipline.
• Six or more years of security engineering experience on AI/ML systems.
• Strong understanding of LLM internals, AI architectures, and failure modes.
• Hands-on experience designing security controls for AI-powered applications.
• Deep knowledge of application security, identity, and cryptography fundamentals.
• Experience with threat modeling and security architecture reviews.
• Familiarity with adversarial ML, prompt injection, and model abuse research.
• Proficiency in Python and at least one systems language.
• Strong understanding of cloud security and modern infrastructure controls.
• Excellent written and verbal communication skills.

Responsibilities

• Define and implement security controls targeting LLM and AI risks.
• Build threat models for AI systems (prompt injection, data exfiltration, abuse).
• Design and deploy guardrails, filters, and policy enforcement for model endpoints.
• Implement runtime detection and response for adversarial prompts and abuse.
• Secure training/fine-tuning pipelines, data provenance, integrity, access controls.
• Design controls for sensitive data handling in LLM workflows.
• Lead red-team exercises against AI systems and drive remediation.
• Evaluate and harden third-party AI services and open-source components.
• Implement identity, authorization, and tenant isolation for multi-tenant AI services.
• Drive supply chain security for ML artifacts (weights, datasets, dependencies).
• Collaborate with privacy/legal/compliance to meet regulatory obligations.
• Develop monitoring, logging, and detection strategies for AI workloads.
• Lead incident response for AI-security events and drive improvements.
• Stay current with adversarial ML, LLM security, and regulatory developments.

Skills

Python

LLM security

Threat modeling

Security architecture

Cryptography

Adversarial ML

Security engineering

Communication

Education

Bachelor’s or Master’s degree in CS/Cybersecurity or related

Job description

AI Risk Engineer – Remote

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: AI Risk Engineer

Location: 100% Remote (Continental United States)

Position Type: Full-time, Direct W2

Salary Range: $100,000 to $150,000 annually

Experience: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary: We are seeking an AI Risk Engineer to lead the design and implementation of security controls, threat models, and incident response capabilities specifically tailored to AI and machine learning systems. The role addresses the unique security challenges posed by LLMs, model APIs, training data pipelines, and AI-powered applications, including prompt injection, model abuse, data exfiltration, and supply chain risks. The ideal candidate has strong security engineering fundamentals and a deep understanding of how modern AI systems work in practice, with hands‑on experience designing defenses for both AI‑powered applications and the AI infrastructure that supports them.

Key Responsibilities:

• Define and implement security controls specifically targeting LLM and AI‑powered application risks.
• Build threat models for AI systems, including prompt injection, jailbreaks, data exfiltration, and abuse patterns.
• Design and deploy guardrails, content filters, and policy enforcement layers around model endpoints.
• Implement runtime detection and response capabilities for adversarial prompts and abusive behavior.
• Secure training and fine‑tuning pipelines, including data provenance, integrity, and access controls.
• Design controls for sensitive data handling, retention, and redaction in LLM workflows.
• Lead red‑team exercises against AI systems and drive remediation of identified weaknesses.
• Evaluate and harden third‑party AI services and open‑source AI components used internally.
• Implement identity, authorization, and tenant‑isolation patterns for multi‑tenant AI services.
• Drive supply chain security for ML artifacts including weights, datasets, and inference dependencies.
• Collaborate with privacy, legal, and compliance teams to ensure AI systems meet regulatory obligations.
• Develop monitoring, logging, and detection strategies tailored to AI workloads.
• Lead incident response for AI‑specific security events and drive durable improvements.
• Stay current with adversarial ML, LLM security research, and emerging regulatory developments.

Required Qualifications:

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related discipline.
• Six or more years of security engineering experience, including significant work on AI or ML systems.
• Strong understanding of LLM internals, modern AI architectures, and common failure modes.
• Hands‑on experience designing security controls for AI‑powered applications.
• Deep knowledge of application security, identity, and cryptography fundamentals.
• Experience with threat modeling and security architecture review processes.
• Familiarity with adversarial ML, prompt injection, and model abuse research.
• Proficiency in Python and at least one systems language.
• Strong understanding of cloud security and modern infrastructure controls.
• Excellent written and verbal communication skills.

Preferred Qualifications:

• Publications, talks, or CTF participation in AI security topics.
• Experience with red‑teaming LLM‑based products.
• Familiarity with privacy‑preserving ML techniques such as differential privacy.
• Exposure to regulated industries with strict data handling requirements.
• Open‑source contributions to AI security tooling.

Bright Vision Technologies is an Equal Opportunity Employer.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.