Information Security AI Engineer Remote (EST)- Client located in Albany, NY 40 hours/week 1 year (opportunity for extension) Hourly rate 75.00 Department: Information Security Office Initiative: AI (Artificial Intelligence) Cloud first initiatives and new IT projects including O365, Egnyte, and AI result in a resource gap to meet company policy.
IT Systems That Will Be Used:
- Required: Microsoft Suite - Office 360, Azure, Copilot Must understand the Microsoft platforms and how AI tools (Copilot and other internal tools) can work with those technologies.
Mandatory Qualifications:
- 8-10 years of relevant experience.
- Understanding in application integration patterns and API‑based access control.
- Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications, OSCP, CEH, Security+).
- Understanding of role‑based access control.
- Associates degree in cyber security, information assurance, or information technology.
- Minimum of 3 year of dedicated security experience or Bachelor’s degree and 1 years of experience.
Responsibilities:
- Align security monitoring and risk tracking with frameworks like the NIST AI Risk Management Framework and NYS ITS Acceptable Use of AI technology.
- Align security monitoring and risk tracking with frameworks like the NIST AI Risk Management Framework and NYS ITS Acceptable Use of AI technology.
- Protect against model misuse, prompt injection, model evasion, data poisoning, and unauthorized access.
- Integrate AI security tools with our SIEM and cloud platforms to detect and triage anomalies.
- Work with Data Governance, IT, and business teams to validate security controls for AI.
- Manage security operations tasks related to AI, identity and access management, including incident response recommended solutions.
- Conduct regular audits and assessments to identify vulnerabilities and ensure compliance.
- Assess current applications and architecture to ensure implementations align with security strategies, best practices, and approved standards.
- Other duties as assigned that contribute to the key outcomes of the Information Security team.