GenAI Security Engineer | Cloud & Data Safeguards

Fisher Phillips LLP; Atlanta (GA); Hybrid; USD 130.000 - 190.000; Vollzeit

Zusammenfassung

Fisher Phillips LLP in Atlanta is seeking an experienced AI Security Engineer to design, implement, and improve security controls for enterprise AI/ML systems across cloud and SaaS environments. This hands-on role partners with cybersecurity, IT, data, and business teams.

The role emphasizes threat modeling, secure development, data protection, and continuous monitoring of AI platforms, endpoints, and integrations.

Qualifikationen

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent experience).
• 5+ years of security engineering, application/product security, cloud security, software security, or related cybersecurity experience.
• Hands-on experience securing generative AI and LLM systems, including RAG, agents, model/API integrations, and enterprise AI platforms.
• Experience with threat modeling, secure design/SDLC, application/API security testing, IAM, secrets management, and security logging/monitoring.
• Proficiency in Python or another programming/scripting language; experience with APIs, automation, CI/CD, or security tooling.
• Knowledge of AI threats and mitigations, including prompt injection, data leakage/poisoning, model extraction, insecure tool use, excessive agency, and AI supply-chain risk; familiarity with cloud AI services.

Aufgaben

• Design and maintain security architecture for generative AI, machine learning, AI-enabled SaaS applications, agents, APIs, and supporting cloud services.
• Establish security standards, reference patterns, and guardrails for AI development, deployment, integration, and use.
• Perform security reviews and threat modeling for AI solutions, including model access, data flows, retrieval‑augmented generation, plugins, tools, agents, and third‑party integrations.
• Evaluate AI technologies, models, vendors, and services to ensure security and privacy requirements are incorporated into design and implementation.
• Implement controls to protect AI platforms, model endpoints, APIs, orchestration layers, vector databases, development environments, and supporting cloud infrastructure.
• Partner with application and platform teams to embed secure development, testing, secrets management, logging, and vulnerability remediation into AI solutions.
• Apply least privilege, strong authentication, service identity, privileged access, and lifecycle controls to AI platforms, models, agents, and workloads.
• Protect training, grounding, prompt, output, and telemetry data using data classification, encryption, DLP, access controls, and appropriate retention practices.
• Review model and agent permissions, data access, connectors, and tool integrations to identify excessive privileges, unsafe trust relationships, and unintended data exposure.
• Implement and optimize security controls for AI systems, including model gateways, content filtering, runtime guardrails, API security, cloud security, SIEM, DLP, and monitoring.
• Develop detections and response procedures for AI‑related misuse, policy violations, data leakage, anomalous model activity, and compromised integrations.
• Automate security validation, testing, monitoring, and enforcement using Python, PowerShell, APIs, CI/CD, infrastructure‑as‑code, or orchestration tools.
• Partner with compliance, privacy, legal, data, and business stakeholders to align AI security controls with policies, client expectations, governance requirements, and organizational risk objectives.
• Develop documentation for AI security standards, architecture decisions, threat models, control designs, risk exceptions, and remediation plans.
• Support AI risk assessments, incident investigations, tabletop exercises, and reviews of emerging AI threats, vulnerabilities, and attack techniques.
• Communicate AI security risks and recommendations clearly to technical and non‑technical stakeholders.

Kenntnisse

Security engineering

Threat modeling

Secure SDLC

Python

CI/CD

Cloud security

AI security

Ausbildung

Bachelor's degree

Jobbeschreibung

Fisher Phillips LLP in Atlanta is seeking an experienced AI Security Engineer to design, implement, and improve security controls for enterprise AI/ML systems across cloud and SaaS environments. This hands-on role partners with cybersecurity, IT, data, and business teams.

The role emphasizes threat modeling, secure development, data protection, and continuous monitoring of AI platforms, endpoints, and integrations.