Senior AI/ML Product Security Engineer

Norstella; Cheyenne (WY); Remote; USD 180,000 - 230,000; Full time

Benefits offered by this job

Medical benefits

HSA/FSA

Dental & Vision

401k with match

Disability insurance

Parental leave

PTO

Job summary

Norstella seeks a Senior Product Security Engineer to lead multi-product security for AI/ML platforms (Forge) and its Sage KB ecosystem. You will mentor engineers, drive threat modelling, vulnerability management, and secure SDLC practices across CI/CD in AWS/GCP/Azure, ensuring HIPAA, GDPR, SOC 2 compliance and safe AI-generated code.

You will partner with engineering to embed security guardrails, manage incidents, and advance AI/ML security governance, with strong emphasis on risk analysis,

Qualifications

• Bachelor's degree or equivalent experience; security certifications preferred.
• 4+ years leading multi-product security programs, with AI/ML in production.
• Experience integrating security into SDLC across teams and cloud environments.
• Familiarity with SOC 2, HIPAA, GDPR, FDA 21 CFR Part 11 is ideal.

Responsibilities

• Lead threat modelling across complex architectures and prompt/RAG pipelines.
• Drive secure development training and establish SDLC security standards.
• Manage vulnerabilities and set triage/remediation priorities.
• Oversee AI/ML supply chain security including model providers and toolchains.
• Integrate security into CI/CD across multi-cloud environments.
• Lead incident response and disclosure processes for cross-product incidents.
• Define guardrails for AI-generated code and ensure auditable decision trails.
• Instrument observability and ensure auditable agent decisions for regulators.

Skills

Threat modelling

Secure development training

Vulnerability management

AI/ML security governance

CI/CD security

Incident response

Observability & tracing

SSDLc governance

Regulatory compliance

Education

Bachelor's degree

CISSP

OSWE

AI security credentials

Tools

LangGraph

CrewAI

Autogen

Semantic Kernel

MCP

Job description

Norstella seeks a Senior Product Security Engineer to lead multi-product security for AI/ML platforms (Forge) and its Sage KB ecosystem. You will mentor engineers, drive threat modelling, vulnerability management, and secure SDLC practices across CI/CD in AWS/GCP/Azure, ensuring HIPAA, GDPR, SOC 2 compliance and safe AI-generated code.

You will partner with engineering to embed security guardrails, manage incidents, and advance AI/ML security governance, with strong emphasis on risk analysis,