Security Engineer: AI & Cloud Defense

Allium; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Allium is seeking a Security Engineer to design and operate controls protecting its infrastructure, AI-enabled tools, and internal systems. You will investigate threats, implement practical fixes, and automate security tasks across cloud, code, and data platforms.

This hands-on role requires securing human and AI agent activity, reducing risk from credential theft, and strengthening dependencies and software supply chains.

Qualifications

• Experience implementing least privilege and phishing-resistant authentication in cloud environments.
• Ability to test and harden AI agents, with robust access controls and audit trails.
• Build and tune detection and response using identity, cloud, and CI/CD telemetry.
• Reduce software supply-chain risk by validating dependencies, credentials, and build workflows.

Responsibilities

• Secure cloud infrastructure and access, implementing least privilege and strong authentication.
• Secure AI agents and developer tools, with permissions, isolation, and audit trails.
• Build detection and response by correlating telemetry to detect credential theft and unusual access.
• Reduce software supply-chain risk by validating dependencies, CI/CD processes, and third-party integrations.
• Move quickly on threats, patching and isolating affected components as needed.
• Automate and document security processes using code, APIs, and runbooks.
• Support employee security and enterprise assurance with endpoint protections and audits.

Skills

Cloud security

Threat detection

IAM & access control

Security automation

Tools

MCP

CI/CD tooling

Job description

Allium is seeking a Security Engineer to design and operate controls protecting its infrastructure, AI-enabled tools, and internal systems. You will investigate threats, implement practical fixes, and automate security tasks across cloud, code, and data platforms.

This hands-on role requires securing human and AI agent activity, reducing risk from credential theft, and strengthening dependencies and software supply chains.