AI Security Engineer

Samaritan's Purse; Boone (NC); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

On-site Medical Clinic

FSA

Disability insurance

Paid Family Medical Leave

Term Life Insurance

401(k)

10 paid holidays

12 vacation/personal days

Job summary

Samaritan's Purse in Boone, NC seeks an AI Security Engineer to design, secure, and maintain infrastructure for the ministry's AI workloads. You will collaborate with cybersecurity and IT teams to implement container security, workload isolation, access controls, and network segmentation across Kubernetes clusters.

The role requires hands-on experience securing production AI/ML workloads, strong Kubernetes expertise, and cloud platform familiarity, plus certifications such as CKS or SecAI+.

Qualifications

• Bachelor's degree in a related field and 5–7 years securing Kubernetes and production AI workloads.
• At least one Kubernetes/container security certification (CKS) or AI security cert; or equivalent security credentials.
• Deep knowledge of Kubernetes, container security, and Linux with RBAC and network policies.
• Experience with cloud platforms and CI/CD tools; security across AI supply chain and datasets.

Responsibilities

• Design, secure, and maintain infrastructure for the ministry's AI workloads.
• Monitor security across Kubernetes and AI workloads; develop threat detections and incident response.
• Conduct threat modeling, vulnerability management, and supply chain risk remediation.

Skills

Kubernetes security

AI security

Cloud platforms

CI/CD tooling

Linux

RBAC & policies

Incident response

Education

Biblical Studies (12 credits)

Tools

Terraform

Ansible

Jenkins

SIEM

Job description

Location: Boone, NC, United States
Job ID: 17861
Date Posted: Oct 15, 2026

Get Involved!

What do we believe?

Demonstrate Biblical Integrity

At Samaritan's Purse, the Gospel is the center of all we do! We start each day with a time of devotions and prayer for each other, our staff, and volunteers who serve around the world. As a faith-driven organization, our Statement of Faith shapes every aspect of our global work.

We are seeking an AI Security Engineer to join our Information Technology team in Boone, NC. Through humanitarian work, the goal and purpose of Samaritan's Purse are to help people in Jesus' name and share the Gospel of Jesus Christ.

In the role of AI Security Engineer,you will have the opportunity to:

Maintain a personal, active relationship with Jesus Christ and is a consistent witness for Jesus Christ.

Design, secure, and maintain infrastructure supporting the ministry's AI workloads. Collaborate with cybersecurity and technical teams to implement container and cluster security, workload isolation, access controls, and network segmentation.

Conduct security assessments, threat modeling, and adversarial testing of AI applications, model endpoints, and integrations. Apply emerging threat intelligence and recognized AI security frameworks to identify risks and strengthen controls.

Monitor security alerts, logs, and audit trails across Kubernetes and AI workloads. Develop threat detections, investigate potential incidents, and support incident response and on-call coverage in accordance with established procedures.

Identify and prioritize vulnerabilities and supply chain risks across the AI stack, including containers, infrastructure components, models, datasets, and tooling. Collaborate with technical teams to coordinate remediation.

Support AI governance by implementing technical controls, maintaining audit evidence, and providing cybersecurity guidance to support acceptable use and secure agent execution.

Other duties as assigned.

What are the qualifications?

Serve with Excellence

As a qualified candidate, you will have the following skills and experience:

Bachelor's degree in a related field from an accredited college or university and five (5) to seven (7) years of related experience and/or training, including demonstrated hands-on experience securing Kubernetes and production artificial intelligence or machine learning workloads; or an equivalent combination of education and experience.

At least one cybersecurity certification in Kubernetes or container security, such as CKS, or artificial intelligence security, such as CompTIA SecAI+, required; or a general cybersecurity certification, such as CISSP, CCSP, CISM, OSCP, GIAC, or similar, combined with demonstrated Kubernetes and artificial intelligence security experience.

Comprehensive knowledge of Kubernetes, container security, and Linux, including RBAC, admission controls, workload isolation, network policies, secrets management, and workload identity.

Comprehensive knowledge of AI security, including generative and agentic applications, model serving, RAG pipelines, and tool integrations, with experience mitigating prompt injections, context poisoning, and data exfiltration.

Thorough knowledge of cloud platforms (AWS, Azure, GCP, OpenStack), automation and CI/CD tools (Terraform, Ansible, Jenkins), and cybersecurity solutions (SIEM, EDR, SOAR, DLP, vulnerability and identity management), including scripting and software and AI supply chain security.

12 credit hours of college-level Biblical Studies (required); if not already completed, an opportunity to meet and complete the requirement is available upon hire.

What are the benefits?

Walk in Bold Faith

Samaritan's Purse is proud to offer a competitive benefits package, including:

• On-site Medical Clinic (staff and dependents)
• Flexible Spending Account (FSA)
• Long-term and Short-term disability insurance
• Paid Family Medical Leave
• Term Life Insurance
• 401(k) retirement savings plan
• 10 paid holidays
• 12 vacation/personal days

Type: Full-Time

Department: Information Technology

Language Requirement: Fluency in English (required)

Samaritan's Purse
PO Box 3000
Boone, NC 28607
828.262.1980.

Samaritan’s Purse is a 501(c)(3) tax-exempt charity. All contributions designated for specific projects shall be applied to those projects, and we may assess up to 10 percent to be used for administering the gift. Occasionally, we receive more contributions for a given project than can be wisely applied to that project. When that happens, we use these funds to meet a similar pressing need.