Remote AI-First InfoSec Engineer: Secure AI Adoption

Vibehackers; Northern (KY); Hybrid; USD 170,000 - 220,000; Full time

Benefits offered by this job

Medical, dental, and vision plans with

HSA contributions starting Day 1

6% 401(k) match

PTO and paid holidays

Parental leave

Life insurance (2x salary)

Job summary

Rithum is seeking a Staff AI-First Information Security Engineer to own the intersection of AI adoption and information security. You will design guardrails for AI-powered products, build automated security tooling, and codify controls as policy- and infrastructure-as-code to enable fast, low-risk AI usage across engineering teams.

You will maintain risk registers, enforce identity controls for AI/non-human identities, and integrate security tooling with SIEM, CSPM, SAST/DAST.

Qualifications

• 5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs, RAG).
• Experience using AI tools (ChatGPT, Copilot, Claude) and LLM frameworks/APIs (OpenAI, Anthropic, LangChain) to accelerate work.
• Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI and non-human identities.
• Experience with infrastructure and policy-as-code (e.g., Terraform, OPA/Rego) and proficiency in a scripting language for automation (Python preferred).
• Cloud security expertise (AWS-focused experience/certification or equivalent), including multi-account governance and preventive guardrails.
• Application security knowledge (OWASP Top 10, OWASP LLM/GenAI Top 10), secure SDLC, and threat-modeling methodologies (STRIDE, PASTA, or equivalent).
• Practical experience building or operating AI agents and integrating security tooling (SIEM, CSPM, SAST/DAST/SCA) for actionable outputs.
• Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

Responsibilities

• Bridge architectural intent and operational reality; propose compensating controls and manage residual risk tracking and remediation.
• Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code.
• Implement and enforce identity and access controls, including access boundaries for AI systems and non-human/agent identities.
• Maintain the InfoSec risk register; track emerging threats and translate them into actionable guidance.
• Support third-party/vendor risk assessments with emphasis on vendors processing data through AI pipelines.
• Automate repetitive security workflows (evidence collection, access reviews, alert enrichment) and build/operate AI-assisted security agents with human-in-the-loop gates and least-privilege credentials.
• Integrate security tooling (SIEM, CSPM, DAST/SAST, vulnerability scanners) with LLM layers to surface actionable insight and automated response.
• Define and enforce security requirements for AI features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
• Conduct threat modeling for agentic and LLM-based systems, addressing novel attack surfaces like tool misuse, indirect prompt injection, and supply chain risk.

Skills

AI/ML security

Identity & access management

Cloud security

Threat modeling

Security tooling & automation

Scripting (Python)

Tools

Terraform

OPA/Rego

Python

AWS

SIEM

CSPM

SAST

DAST

SCA

Job description

Rithum is seeking a Staff AI-First Information Security Engineer to own the intersection of AI adoption and information security. You will design guardrails for AI-powered products, build automated security tooling, and codify controls as policy- and infrastructure-as-code to enable fast, low-risk AI usage across engineering teams.

You will maintain risk registers, enforce identity controls for AI/non-human identities, and integrate security tooling with SIEM, CSPM, SAST/DAST.