Lead AI Security Engineer

OneStream; United States; On-site; USD 131,000 - 170,000; Full time

Benefits offered by this job

Excellent Medical Plan

Dental & Vision Insurance

Life Insurance

Short & Long Term Disability

Vacation Time

Paid Holidays

Professional Development

Retirement Plan

Job summary

OneStream is seeking a Senior AI Security Engineer to own the day‑to‑day security of our internal AI environment and drive the security roadmap with the AI Security Architect/Manager. You will help define security reviews, implement the AI Detection and Response capability, and mentor the growing AI Security team as the organization expands its AI footprint.

This senior, hands‑on role partners with IT, Legal, Compliance, and business leaders to enable secure AI adoption, incident response, and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• 6+ years of experience in security engineering, security operations, application security, or a related security discipline, including military or government cybersecurity roles.
• At least 1–2 years of hands‑on experience securing or building with LLM‑based systems, such as enterprise AI assistants, agents, tool‑calling and connector integrations, or retrieval‑augmented workflows.
• Demonstrated track record of owning a security program, capability, or major initiative end to end, including setting technical direction and making independent risk decisions.
• Working knowledge of AI‑specific threats (prompt injection, jailbreaks, tool abuse, data exfiltration) and frameworks like OWASP Top 10 for LLM Apps, MITRE ATLAS, and NIST AI RMF.
• Experience reviewing SaaS security posture, identity and access controls, and least‑privilege and data‑sharing configurations.
• Experience conducting third‑party and vendor security risk assessments and driving remediation with vendors and internal owners.
• Experience with detection engineering, SIEM and log analysis, and building monitoring and alerting for new data sources.
• Proficiency in scripting and automation (Python or similar), working with APIs, and integrating tools and platforms.
• Strong written and verbal communication skills, with the ability to explain AI risk and trade‑offs to technical and non‑technical stakeholders, including Security leadership and executives.

Responsibilities

• Serve as the senior technical owner for the day-to‑day security of OneStream’s internal AI environment, including enterprise AI assistant platforms, agents, connectors and tool integrations; co‑develop and execute the internal AI security roadmap.
• Define and own the security review standard for enterprise AI assistant and agent configurations, connectors, and workflows, including tenant‑level controls, data‑sharing and retention settings, integration configurations, and custom agents and skills; set secure‑by‑default baselines.
• Architect, implement, and own the AI Detection and Response (AIDR) capability end to end: monitor AI usage, detect prompt injection, tool abuse, data exfiltration, and irregular agent behavior; integrate alerting and response into SOC workflows.
• Lead and set the standard for security reviews of new and third‑party AI tooling against OneStream security policies and procedures; serve as escalation point for high‑risk reviews.
• Serve as the Security team’s AI automation champion: identify opportunities to incorporate AI into security operations and lead design and delivery of those workflows.
• Lead threat modeling of internal AI use cases against AI‑specific attack classes and influence architecture decisions across IT and Engineering.
• Define, implement, and own metrics program for internal AI security, and report AI security posture and progress to Security leadership.
• Operationalize AI governance by partnering with IT, Legal, Privacy, and business teams to translate AI acceptable use and data classification into guardrails and training.
• Act as incident lead for security incidents involving internal AI systems: investigate, contain, and remediate AI‑related incidents and drive lessons learned into controls.
• Monitor the evolving AI threat landscape and translate developments into updated controls and guidance for the organization.
• Provide technical leadership and mentorship to AI Security team members and raise AI security capability across the broader Security team.

Skills

AI & LLM Security

Detection Engineering & Incident

Security Architecture & Least-Priv

Third-Party Risk Assessment

Security Automation & Scripting

Threat Modeling

Security Metrics & Program

Cross-Functional Influence

Technical Leadership & Mentorship

Ownership & Autonomy

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM

Scripting (Python)

APIs

Job description

OneStream is seeking a Senior AI Security Engineer to own the day‑to‑day security of our internal AI environment and drive the security roadmap with the AI Security Architect/Manager. You will help define security reviews, implement the AI Detection and Response capability, and mentor the growing AI Security team as the organization expands its AI footprint.

This senior, hands‑on role partners with IT, Legal, Compliance, and business leaders to enable secure AI adoption, incident response, and