AI Security Engineer: Model Validation & Guardrails (Hybrid)

ZealHire Inc.; Miami, Northern (FL, KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Carnival Corp’s GCS Security Architecture function secures AI adoption by ensuring GenAI and model workloads meet security standards. This hands-on role focuses on AI security posture, model validation, and inference-layer controls across global brands.

The engineer will build tooling, automate testing, and integrate security controls into CI/CD, partnering with Cloud Security to enforce data protection and least-privilege access across AWS and Azure environments.

Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Artificial Intelligence, or a related field.
• Cloud environment security fundamentals (Azure & AWS). Proficient in Python.
• Knowledge of ML concepts, secure MCP config, API security, and data protection.

Responsibilities

• Implement AISPM/DSPM across model and inference infrastructure and drive remediation.
• Design, build, and run model validation harnesses for robustness and data leakage checks.
• Build and maintain inference-layer guardrails and access controls for GenAI applications.
• Define and enforce PHI/PII and data protection controls, and identity/access controls for AI systems.
• Partner with Cloud Security to establish guardrails in AWS and Azure for AI workloads.
• Develop scripts and tooling to integrate AI security controls into CI/CD pipelines.
• Document secure architecture patterns and remediation guidance for deployment.
• Research and pilot AI security tools aligned to AI RMF standards.
• Transition matured AI security monitoring to security operations teams.

Skills

Python scripting

Security tooling

AI/ML security

NIST AI RMF

Education

Bachelor's degree in Cyber Security/CS/AI

Tools

AWS

Azure

CI/CD tooling

Job description

Carnival Corp’s GCS Security Architecture function secures AI adoption by ensuring GenAI and model workloads meet security standards. This hands-on role focuses on AI security posture, model validation, and inference-layer controls across global brands.

The engineer will build tooling, automate testing, and integrate security controls into CI/CD, partnering with Cloud Security to enforce data protection and least-privilege access across AWS and Azure environments.