Remote Senior AI/ML Security Lead

Norstella; Jackson (MS); Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical and Prescription Drug Benefits

HSA or FSA

Job summary

Norstella is seeking a Senior Product Security Engineer to lead multi‑product security efforts around AI/ML platforms (Forge) and Sage KB. You will mentor engineers, shape DevSecOps, coordinate incident response, and ensure HIPAA/GDPR/SOC2 compliance across the autonomous SDLC.

You will drive threat modelling, vulnerability management, supply‑chain risk, and security integration across CI/CD and cloud environments, with hands‑on review of AI‑generated code and agent outputs.

Qualifications

• Typically 4+ years leading multi‑product security programs, with at least 1–2 years in AI/ML or LLM‑powered systems in production.
• Bachelor’s degree or equivalent; CISSP/OSWE or cloud security cert preferred.
• Strong knowledge of managing SDLC risks across multiple teams and mentoring others in secure design, including agentic AI patterns.
• Proficient in enterprise vulnerability management, prioritization, and automation strategies.
• Experience integrating security into complex CI/CD and cloud environments, including containerized runtimes and GPU‑accelerated inference.

Responsibilities

• Lead threat modelling across complex architectures and prompt/RAG pipelines; mentor engineers in risk analysis.
• Lead secure development training and evolve standards based on OWASP LLM Top 10 and AI threat research.
• Oversee vulnerability management, triage, and gating for multiple products.
• Drive AI/ML supply chain risk assessments and API governance across portfolios.
• Ensure security across CI/CD, multi‑cloud platforms, and auditable agent runs.
• Act as IR lead for cross‑product incidents involving prompt injection, jailbreak, or data leakage.
• Lead model security governance and safe design principles for agent chains.
• Instrument observability, logging, and tracing across agent execution graphs for regulators.

Skills

AI/ML security

Secure SDLC

Threat modelling

Vulnerability management

CI/CD security

Cloud security

Python/TypeScript

Regulatory compliance (HIPAA, GDPR,SOC

Education

BA/BS degree or equivalent experience

CISSP / OSWE

AI Security credentials

Tools

LangGraph

CrewAI

Autogen

Semantic Kernel

MCP

Pinecone

Weaviate

Qdrant

pgvector

Job description

Norstella is seeking a Senior Product Security Engineer to lead multi‑product security efforts around AI/ML platforms (Forge) and Sage KB. You will mentor engineers, shape DevSecOps, coordinate incident response, and ensure HIPAA/GDPR/SOC2 compliance across the autonomous SDLC.

You will drive threat modelling, vulnerability management, supply‑chain risk, and security integration across CI/CD and cloud environments, with hands‑on review of AI‑generated code and agent outputs.