Security Program Lead

Allen Institute for Artificial Intelligence; Seattle (WA); On-site; USD 176,000 - 265,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan

Commuting stipend

Wellbeing & fitness allowance

Generous paid time off

Job summary

You will partner with researchers and engineers to build tooling for compliance, implement secure-development practices, and translate security risk into actionable guidance for leadership.

Qualifications

• Bachelor's Degree and 8–10 years of overall software/infrastructure engineering experience.
• 5+ years focused specifically on security engineering, application security, or security architecture, ideally including time owning a security program.
• Hands‑on experience conducting security and compliance audits, and directly implementing or assessing controls. For example, experience with NIST 800-171.
• A track record of stepping up to ambiguous, high‑stakes problems — building a program largely from the ground up.
• Strong ability to advise non-security technical leaders and translate risk into actionable recommendations.

Responsibilities

• Establish and maintain documentation for Ai2's organizational approach to security, including policies, standards, and SSPs.
• Maintain and prioritize a backlog of security investments.
• Conduct in-depth security assessments to identify and mitigate vulnerabilities across cloud infrastructure, ML pipelines, and application code.
• Investigate and respond to security incidents, lead root-cause analysis, and drive remediation to closure.
• Build systems and tooling that improve security compliance, observability, and governance (e.g., audit logging, access control, vulnerability management, configuration baselines).
• Partner across research and engineering teams to address security concerns.
• Define and evolve security standards and secure-development practices to raise overall maturity.
• Evaluate and secure SaaS platforms and tools (vendor risk assessments, access reviews, data handling review, multi-tenant data isolation).
• Serve as the organization’s trusted voice on security, translating risk into practical guidance for teams.

Skills

Security engineering

Security program ownership

Audits

NIST 800-171

Cloud security

ML pipelines

Incident response

Education

Bachelor's Degree

Job description

You will partner with researchers and engineers to build tooling for compliance, implement secure-development practices, and translate security risk into actionable guidance for leadership.