Lead AI Security Engineer

GoTo Foods, LLC; Atlanta (GA); On-site; USD 120,000 - 200,000; Full time

Job summary

GoTo Foods, LLC is seeking a Lead AI Security Engineer to secure its AI/ML systems across design to deployment, monitoring, and incident response. You will partner with security, engineering, data science, product, privacy, legal, finance, human resources, marketing, and governance teams to identify and reduce risks in AI applications, models, data pipelines, agents, prompts, and integrations.

The ideal candidate combines hands-on cybersecurity with practical AI/ML understanding, cloud-native

Qualifications

• Bachelor's degree in STEM or related field and relevant security experience.
• Hands-on cybersecurity experience in application security, cloud security, or security engineering.
• Experience with AI/ML security concepts and AI risk management is preferred.
• Familiarity with threat modeling, secure design reviews, and security testing for modern cloud apps.

Responsibilities

• Develop and implement security requirements for AI/ML applications and data pipelines.
• Perform AI-focused threat modeling and risk assessments for model training, deployment, and governance.
• Evaluate AI systems for vulnerabilities like prompt injection and data leakage.
• Collaborate with engineering and data science teams to embed security into the AI development lifecycle.
• Support incident response for AI-related security events.

Skills

AI security concepts

Threat modelling

Cloud security

Security testing

Communicate risk

DevSecOps

Python scripting

Education

Bachelor's degree in STEM

Tools

Azure

AWS

GCP

Job description

Job Summary

Lead AI Security Engineer is a mid-level individual contributor responsible to secure the organization’s artificial intelligence and machine learning systems across the full lifecycle—from design and model development through deployment, monitoring, and incident response. This role will partner with all business lines such security, engineering, data science, product, privacy, legal, finance, human resources, marketing, and governance teams to identify and reduce risks associated with AI applications, models, data pipelines, agents, prompts, and integrations.

Job Summary

Lead AI Security Engineer is a mid-level individual contributor responsible to secure the organization’s artificial intelligence and machine learning systems across the full lifecycle—from design and model development through deployment, monitoring, and incident response. This role will partner with all business lines such security, engineering, data science, product, privacy, legal, finance, human resources, marketing, and governance teams to identify and reduce risks associated with AI applications, models, data pipelines, agents, prompts, and integrations. The ideal candidate combines hands‑on cybersecurity experience with a practical understanding of AI/ML systems, cloud-native architecture, secure software development, threat modeling, and emerging AI‑specific risks such as prompt injection, data leakage, model manipulation, insecure plugin/tool use, supply chain exposure, and unsafe agent behavior.

Essential Functions

• AI Technical Insight
• Develop and implement security requirements, controls, and review processes for AI/ML applications, models, data pipelines, and AI‑enabled products.
• Perform AI-focused threat modeling, architecture reviews, and risk assessments for model training, fine‑tuning, retrieval‑augmented generation, inference, agent workflows, and third‑party AI services.
• Evaluate AI systems for vulnerabilities including prompt injection, jailbreaks, data exfiltration, insecure tool/function calling, model inversion, poisoning, adversarial inputs, excessive agency, and unsafe output handling.
• Secure Architecture: Ability to design and evaluate secure AI system patterns, including model access control, data boundaries, tool isolation, and monitoring.
• Adversarial Mindset: Ability to think like an attacker and test how AI systems may be misused or manipulated.
• Business‑Centered AI Insight
• Partners with engineering and data science teams embed security into the AI development lifecycle, including secure design patterns, guardrails, logging, monitoring, and abuse‑case testing.
• Design and execute security testing plans for AI applications, including red teaming, misusecase validation, automated testing, and manual assessment techniques.
• Assess AI vendors, open‑source models, datasets, packages, APIs, and infrastructure dependencies for security, privacy, compliance, and supply chain risk.
• Support incident response for AI‑related security events, including anomalous model behavior, data exposure, abuse patterns, compromised integrations, or unauthorized model access.
• Collaborate with privacy, legal, compliance, and governance stakeholders to support responsible AI practices, data protection, audit readiness, and regulatory obligations.
• Product Partnership: Ability to influence teams through practical guidance, reusable patterns, and clear risk‑based recommendations.
• AI Risk Insight
• Track emerging AI security threats, frameworks, and industry guidance; translate learnings into practical controls and actionable recommendations.
• Define andmaintainAI security standards, secure coding guidance, model deployment checklists, and governance artifacts aligned with organizational risk appetite.
• AI Security Risk Assessment: Ability toidentify, prioritize, and mitigate AI‑specific security risks across business‑critical use cases.
• Continuous Learning: Commitment to staying current with fast‑moving AI security research, tooling, standards, and threat intelligence.
• What Success Looks Like
• AI security requirements and review processes are consistently adopted across AI‑enabled products and services.
• High‑risk AI threats are identified early and mitigated before production release.
• Security testing and red teaming results produce clear, actionable engineering improvements.
• AI vendors, datasets, models, and integrations are assessed through repeatable risk review processes.
• Security incidents and abuse signals involving AI systems are detected, investigated, and remediated effectively.

Education

Bachelor's degree in STEM related field. Advanced degree is preferred. Non‑degreed applicants with equivalent experience will be considered.

Work Experience

• Minimal 3+ years of experience in cybersecurity, application security, product security, cloud security, security engineering, or a related technical security role.
• Experience in AI security role, preferred.

Skills

• Practical understanding of AI/ML concepts, including model training, inference, embeddings, vector databases, RAG architectures, model APIs, and evaluation workflows.
• Experience performing threat modeling, architecture reviews, secure design reviews, vulnerability assessments, or penetration testing for modern applications and cloud services.
• Familiarity with common AI security risks such as prompt injection, data leakage, unsafe tool use, model poisoning, adversarial examples, insecure outputs, and supply chain threats.
• Working knowledge of secure software development practices, authentication and authorization patterns, API security, secrets management, logging, and monitoring.
• Experience with at least one major cloud platform such as Microsoft Azure, AWS, or Google Cloud Platform.
• Ability to communicate technical risk clearly to engineering teams, leadership, product stakeholders, and non‑security audiences.
• Strong analytical, problem‑solving, documentation, and cross‑functional collaboration skills.
• Experience securing generative AI applications, LLM‑powered products, copilots, autonomous agents, or AI‑assisted developer tools, preferred.
• Hands‑on experience with AI security testing, red teaming, evaluation harnesses, model guardrails, content safety controls, or abuse monitoring, preferred.
• Knowledge of AI governance and risk management frameworks such as NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, ISO/IEC 42001, or related guidance, preferred.
• Experience with DevSecOps, CI/CD security controls, SAST/DAST/SCA, container security, infrastructure as code scanning, and software supply chain security, preferred.
• Familiarity with Python, scripting, notebooks, ML frameworks, security automation, or data analysis workflows, preferred.

Certifications

Relevant certifications such as CISSP, CSSLP, CCSP, GSEC, GWAPT, OSCP, Azure Security Engineer, or equivalent practical experience.

Travel Requirement