AI Security Engineer

Cetera Financial Group Inc; Dallas (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Cetera Financial Group Inc is looking for a skilled professional to join their Information Security team focused on AI security risks. In this role, you will assess, mitigate, and protect against potential threats involving AI/ML systems while ensuring compliance with regulatory requirements.

The ideal candidate will have over 5 years of experience in cloud and application security, a strong grasp of DevSecOps practices, and excellent communication skills to interact with various stakeholders. Join Cetera to help innovate securely!

Qualifications

• 5+ years of experience in cloud security, application security, or a combination of both.
• Hands-on experience securing cloud-native infrastructure and applications.
• Strong communication skills across technical and non-technical stakeholders.

Responsibilities

• Identify, assess, and mitigate security risks associated with AI/ML systems.
• Implement controls aligned to OWASP Top 10 for LLMs and NIST AI RMF.
• Support incident response for AI and cloud-related threats.

Skills

Cloud security

Application security

DevSecOps practices

Risk assessment

Communication skills

AI/ML concepts

Education

5+ years of experience in related fields

Tools

AWS Bedrock

SAST/DAST tools

Job description

At Cetera, our Information Security organization protects employees, advisors, and clients from evolving cyber threats across cloud, SaaS, and emerging AI-enabled technologies. As artificial intelligence capabilities expand across the enterprise, Cetera is investing in secure AI adoption, governance, and risk mitigation to ensure innovation aligns with regulatory and security expectations.

What will you do:

• Identify, assess, and mitigate security risks associated with AI/ML systems
• Implement controls aligned to OWASP Top 10 for LLMs and NIST AI RMF
• Perform threat modeling for AI-enabled applications
• Propose and validate technical guardrails to prevent unauthorized AI actions and support secure AI development
• Identify and assess risk from unsanctioned AI tool usage across the enterprise
• Evaluate third-party AI tools for risk and compliance
• Design and secure cloud-based AI workloads
• Integrate security into CI/CD pipelines
• Partner with IT Risk, Cloud Security, and Engineering teams
• Support incident response for AI and cloud-related threats
• Develop security standards, runbooks, and architecture documentation
• Support audits and regulatory compliance activities

What you will have:

• 5+ years of experience in cloud security, application security, or a combination of both
• Hands‑on experience securing cloud‑native infrastructure and applications
• Experience with DevSecOps practices and integrating security into CI/CD pipelines
• Understanding of AI/ML concepts and the ability to apply security principles to AI-enabled systems
• Familiarity with OWASP (including Top 10 for LLMs) and NIST frameworks (including AI RMF)
• Experience in regulated environments (financial services or FINRA preferred)
• Strong communication skills across technical and non-technical stakeholders

Preferred Qualifications:

• Experience with AWS Bedrock or other AI/ML platforms
• Certifications such as AWS Security Specialty, AWS Certified Generative AI Developer – Professional, CISSP, or CCSP
• Experience with SAST/DAST tools
• Exposure to AI governance and risk frameworks
• Familiarity with AI-specific threats such as prompt injection, model poisoning, and data exfiltration