Remote AI-First InfoSec Engineer: Secure AI Adoption

vibehackers

United States

Hybride

USD 170 000 - 220 000

Plein temps

14 jours+

Une candidature complète en une minute

Un CV et une lettre de motivation personnalisés, prêts à envoyer.

Passez les filtres ATS

Avantages offerts par ce poste

Medical, dental, and vision plans with

HSA contributions starting Day 1

6% 401(k) match

PTO and paid holidays

Parental leave

Life insurance (2x salary)

Résumé du poste

Rithum is seeking a Staff AI-First Information Security Engineer to own the intersection of AI adoption and information security. You will design guardrails for AI-powered products, build automated security tooling, and codify controls as policy- and infrastructure-as-code to enable fast, low-risk AI usage across engineering teams.

You will maintain risk registers, enforce identity controls for AI/non-human identities, and integrate security tooling with SIEM, CSPM, SAST/DAST.

Qualifications

5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs, RAG).
Experience using AI tools (ChatGPT, Copilot, Claude) and LLM frameworks/APIs (OpenAI, Anthropic, LangChain) to accelerate work.
Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI and non-human identities.
Experience with infrastructure and policy-as-code (e.g., Terraform, OPA/Rego) and proficiency in a scripting language for automation (Python preferred).
Cloud security expertise (AWS-focused experience/certification or equivalent), including multi-account governance and preventive guardrails.
Application security knowledge (OWASP Top 10, OWASP LLM/GenAI Top 10), secure SDLC, and threat-modeling methodologies (STRIDE, PASTA, or equivalent).
Practical experience building or operating AI agents and integrating security tooling (SIEM, CSPM, SAST/DAST/SCA) for actionable outputs.
Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

Responsabilités

Bridge architectural intent and operational reality; propose compensating controls and manage residual risk tracking and remediation.
Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code.
Implement and enforce identity and access controls, including access boundaries for AI systems and non-human/agent identities.
Maintain the InfoSec risk register; track emerging threats and translate them into actionable guidance.
Support third-party/vendor risk assessments with emphasis on vendors processing data through AI pipelines.
Automate repetitive security workflows (evidence collection, access reviews, alert enrichment) and build/operate AI-assisted security agents with human-in-the-loop gates and least-privilege credentials.
Integrate security tooling (SIEM, CSPM, DAST/SAST, vulnerability scanners) with LLM layers to surface actionable insight and automated response.
Define and enforce security requirements for AI features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
Conduct threat modeling for agentic and LLM-based systems, addressing novel attack surfaces like tool misuse, indirect prompt injection, and supply chain risk.

Connaissances

AI/ML security

Identity & access management

Cloud security

Threat modeling

Security tooling & automation

Scripting (Python)

Outils

Terraform

OPA/Rego

Python

AWS

SIEM

CSPM

SAST

DAST

SCA

Description du poste

Staff Information Security Engineer - AI First

Strong AI-first focus — integrates LLMs and AI assistants into security tooling and builds AI-assisted security agents with human-in-the-loop controls.

About the Role

Rithum is hiring a Staff Information Security Engineer focused on securing AI adoption across products and operations. The role designs and implements preventive, policy- and infrastructure-as-code security controls, automates security workflows and integrates LLMs/AI into security tooling to enable safe, scalable AI usage across the company.

Job Description

Role

Rithum seeks a Staff AI-First Information Security Engineer to own the intersection of AI adoption and information security. You will design guardrails for AI-powered products and workforce use, build automated security tooling, codify controls as policy- and infrastructure-as-code, and enable fast, low-risk AI usage across engineering and platform teams.

Key Responsibilities

Bridge architectural intent and operational reality; propose compensating controls and manage residual risk tracking and remediation.
Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code.
Implement and enforce identity and access controls, including access boundaries for AI systems and non-human/agent identities.
Maintain the InfoSec risk register; track emerging threats and translate them into actionable guidance.
Support third-party/vendor risk assessments with emphasis on vendors processing data through AI pipelines.
Automate repetitive security workflows (evidence collection, access reviews, alert enrichment) and build/operate AI-assisted security agents with human-in-the-loop gates and least-privilege credentials.
Integrate security tooling (SIEM, CSPM, DAST/SAST, vulnerability scanners) with LLM layers to surface actionable insight and automated response.
Define and enforce security requirements for AI features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
Conduct threat modeling for agentic and LLM-based systems, addressing novel attack surfaces like tool misuse, indirect prompt injection, and supply chain risk.

Qualifications

Minimum Qualifications

5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs, RAG).
Experience using AI tools (ChatGPT, Copilot, Claude) and LLM frameworks/APIs (OpenAI, Anthropic, LangChain) to accelerate work.
Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI and non-human identities.
Experience with infrastructure and policy-as-code (e.g., Terraform, OPA/Rego) and proficiency in a scripting language for automation (Python preferred).
Cloud security expertise (AWS-focused experience/certification or equivalent), including multi-account governance and preventive guardrails.
Application security knowledge (OWASP Top 10, OWASP LLM/GenAI Top 10), secure SDLC, and threat-modeling methodologies (STRIDE, PASTA, or equivalent).
Practical experience building or operating AI agents and integrating security tooling (SIEM, CSPM, SAST/DAST/SCA) for actionable outputs.
Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

Preferred Qualifications

Production experience building or operating AI agents.
Awareness of privacy regulations affecting AI (GDPR/CCPA), privacy-by-design, and DPIAs.
Red teaming or adversarial ML research experience.
Experience implementing privileged-access, key-management, posture-management, or data-protection programs.
Experience with EDR, CASB, DLP, security automation, and SAST/DAST/IAST/SCA tools.
Cloud architecture or security certifications (e.g., CCSK, TAIS E, AWS certifications).

Compensation & Travel

Expected base pay range (U.S.): $170,000 - $220,000 per year.
Expected discretionary bonus: 12% of annual base salary.
Travel: Up to 10%.

Benefits (select)

Medical, dental, and vision plans with company HSA contributions starting Day 1
6% 401(k) match
PTO and paid holidays (20 days PTO, 9 company-paid holidays, 2 floating holidays, 7 sick days, 2 wellness days, 1 paid volunteer day; increases with tenure)
Parental leave (12 weeks primary, 4 weeks secondary)
Accident, critical illness, and hospital indemnity insurance
Pet insurance; legal assistance and identity-theft insurance
Life insurance (2x salary)
Calm app and Employee Assistance Program
$65/month remote work stipend for internet

ChatGPT Copilot Claude OpenAI Anthropic LangChain Terraform OPA/Rego Python AWS SIEM CSPM DAST SAST Vulnerability scanners RAG EDR CASB DLP IAST SCA STRIDE PASTA OWASP LLM/GenAI Top 10

Skills

Information Security Security Engineering Identity and Access Management Threat Modeling Cloud Security Policy-as-Code Infrastructure-as-Code Automation Scripting Risk Management Vendor/Third-Party Risk Assessment Security Tooling Integration Application Security Compliance (SOC 2 / ISO 27001) Collaboration Research

Experience Level

USD 170,000 - 220,000/year

Employment Type

{Full-Time}