Gen Security AI Engineer

Shain Associates; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Shain Associates is seeking a GenAI Security Engineer to design and implement security controls for GenAI systems and integrations. You will lead threat modeling, secure-by-default architectures, and incident response while collaborating across DevOps, MLOps, Product, Legal, and Compliance to ensure safety and privacy-by-design.

The role emphasizes strong software engineering skills, experience with AI/GenAI tools, and the ability to translate regulatory requirements into auditable security

Qualifications

• 6+ years of software engineering experience with strong coding in Python, Go, or Java.
• Experience with AI/ML and/or GenAI tools and technologies.
• Experience defining and implementing infrastructure and application pipelines.
• Expert understanding of software development methodologies and security practices.
• Ability to deliver robust security controls and communicate with technical and business stakeholders.
• Comfort partnering with DevOps, MLOps, Product, Legal, and Compliance to land guardrails.

Responsibilities

• Build and run generative AI (GenAI) security controls for applications and platforms, including guardrails for model usage and API integrations.
• Secure agent/tool-calling and connector workflows to prevent tool abuse and data exfiltration.
• Lead AI threat modeling and risk assessments, maintaining threat models for prompt injection, jailbreaks, tool injection, data exfiltration, training data leakage, and supply chain risks, and driving mitigations.
• Define secure-by-default reference architectures for cloud-native and hybrid GenAI workloads, including network isolation and secrets handling.
• Develop and continuously improve monitoring and detection for anomalous AI behavior and unsafe outputs.
• Lead incident response and remediation for security events involving AI applications and/or data breaches.
• Translate policy and regulatory requirements into implementation, including governance artifacts, evidence collection, control testing, and audit-ready documentation.
• Act as the GenAI security SME with other internal Technology teams, Compliance, and business stakeholders, staying current on evolving threats.

Skills

Software engineering

Python

Go

Java

AI/GenAI experience

Security engineering

Threat modeling

Job description

As a GenAI Security Engineer, you will develop and implement next-generation security controls to protect the firm’s agentic and human-in-the-loop GenAI systems. Specifically, you will:

• Build and run generative AI (GenAI) security controls for applications and platforms, including guardrails for model usage and API integrations.
• Secure agent/tool-calling and connector workflows, such as MCP or equivalent, to prevent tool abuse and data exfiltration.
• Lead AI threat modeling and risk assessments, maintaining threat models for prompt injection, jailbreaks, tool injection, data exfiltration, training data leakage, and supply chain risks, and driving mitigations.
• Define secure-by-default reference architectures for cloud-native and hybrid GenAI workloads, including network isolation and secrets handling.
• Develop and continuously improve monitoring and detection for anomalous AI behavior and unsafe outputs.
• Lead incident response and remediation for security events involving AI applications and/or data breaches.
• Translate policy and regulatory requirements into implementation, including governance artifacts, evidence collection, control testing, and audit-ready documentation
• Act as the GenAI security SME with other internal Technology teams, Compliance, and business stakeholders, staying current on evolving threats.

What’s required

• 6+ years of software engineering experience with strong coding experience in one or more general purpose languages, such as Python, Go, and/or Java.
• Experience with AI/ML and/or GenAI tools and technologies.
• Experience defining and implementing infrastructure and application pipelines.
• Expert understanding of software development methodologies and concepts.
• Ability to deliver robust, production-ready security controls for agentic GenAI systems and platforms, drive continuous improvement, advocate for safety and privacy-by-design, and communicate effective with technical and business stakeholders.
• Comfort partnering across various internal teams such as DevOps, MLOps, Product,Legal, and Compliance to land guardrails without blocking delivery.
• Excellent organizational, communication, interpersonal, motivational skills in achieving business objectives.
• Background in cybersecurity, including threat modeling and broader security engineering practices.
• Commitment to the highest ethical standards.