AI Security Engineer

Techolution LLC; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Techolution LLC seeks a Senior AI Security Engineer to secure enterprise applications and AI-powered products. Remote role with full-time employment and a strong emphasis on practical security across AI/LLM systems, RAG, and cloud environments.

You will lead threat modeling, vulnerability discovery, and remediation across multiple teams. You will own security assessments, perform hands-on testing, and drive security integration into SDLC/CI/CD pipelines, ensuring scalable security practices and

Qualifications

• 2+ years of hands-on experience in Product Security, Application Security, or Security Engineering.
• Strong experience with Web/API Security, OWASP Top 10, vulnerability assessment, and threat modeling.
• Experience discovering and validating real-world vulnerabilities beyond automated scanners.
• Experience securing cloud, Kubernetes/GKE, IAM, containers, and CI/CD environments.
• Practical experience with AI/LLM security, RAG security, or AI agent security.
• Ability to drive remediation and closure across multiple teams.

Responsibilities

• Own security assessments across enterprise applications, products, repositories, and engineering teams.
• Perform hands-on Web, API, cloud, and Kubernetes security testing, including vulnerability discovery and validation.
• Conduct threat modeling and security assessments for AI/LLM applications, RAG systems, and AI agents.
• Identify AI-specific risks such as prompt injection, data leakage, RAG poisoning, excessive permissions, and unsafe tool calls.
• Identify and prioritize vulnerabilities based on exploitability, business impact, and risk.
• Work with engineering teams to drive remediation, retesting, and closure.
• Integrate security into SDLC and CI/CD pipelines using SAST, DAST, SCA, secrets detection, and security gates.
• Establish scalable security practices across multiple products and teams.
• Communicate vulnerabilities, business impact, and remediation requirements to stakeholders.

Skills

Product Security

Application Security

Web Security

API Security

Threat Modeling

Vulnerability Assessment

Burp Suite

ZAP

Source-code Review

Root-cause Analysis

Cloud Security

Kubernetes/GKE

CI/CD Security

SAST/DAST/SCA

AI/LLM Security

RAG Security

AI Agent Security

Communication

Tools

Burp Suite

ZAP

Job description

We are looking for a Senior AI Security Engineer to secure enterprise applications and AI-powered products across multiple engineering teams and repositories.

The role requires strong hands-on Product/Application Security expertise, combined with practical experience securing AI/LLM applications, RAG systems, and AI agents, Cloud. You will identify and prioritize security risks, drive remediation, and help build scalable security practices across products.

Title : Senior AI Security Engineer

Location :Remote Work

Employment Type: Full-time

Exp Range : 2+ Years

Key Responsibilities:

• Own security assessments across enterprise applications, products, repositories, and engineering teams.
• Perform hands-on Web, API, cloud, and Kubernetes security testing, including vulnerability discovery and validation.
• Conduct threat modeling and security assessments for AI/LLM applications, RAG systems, and AI agents.
• Identify AI-specific risks such as prompt injection, data leakage, RAG poisoning, excessive permissions, and unsafe tool calls.
• Identify and prioritize vulnerabilities based on exploitability, business impact, and risk.
• Work directly with engineering teams to drive remediation, retesting, and closure.
• Integrate security into SDLC and CI/CD pipelines using SAST, DAST, SCA, secrets detection, and security gates.
• Establish scalable security practices across multiple products and teams.
• Communicate technical vulnerabilities, business impact, and remediation requirements to engineering and business stakeholders.

Qualifications

• 2+ years of hands-on experience in Product Security, Application Security, or Security Engineering.
• Strong experience with Web/API Security, OWASP Top 10, vulnerability assessment, and threat modeling.
• Proven ability to discover and validate real-world vulnerabilities, beyond automated scanners.
• Experience with Burp Suite/ZAP, source-code security review, and root-cause analysis.
• Experience securing cloud, Kubernetes/GKE, IAM, containers, and CI/CD environments.
• Experience with SAST, DAST, and SCA within the SDLC.
• Practical experience with AI/LLM security, RAG security, or AI agent security.
• Ability to prioritize security risks and drive vulnerabilities through remediation and closure.
• Strong communication and stakeholder-management skills.

Nice to Have

• GCP/GKE, Vertex AI, Gemini, or Model Armor experience.
• Experience with AI red teaming or LLM security testing.
• OSCP, OSWE, GIAC, CREST, or equivalent certification.