Senior AI/ML Product Security Engineer

Norstella; Trenton (NJ); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical Benefits

HSA/FSA

401k with Company Match

Dental & Vision Benefits

Paid Parental Leave

Disability Insurance

Paid Time Off

Job summary

Norstella seeks a Senior Product Security Engineer, AI ML to lead the security program across multiple products, focusing on AI/ML governance, secure SDLC, and threat modeling for the Forge platform and Sage KB ecosystem. The role partners with engineering to embed guardrails and ensure HIPAA, GDPR, SOC 2, and FDA readiness.

You will mentor engineers, drive vulnerability management, and coordinate cross‑product incident response, while shaping DevSecOps practices and risk-informed decision

Qualifications

• 4+ years leading multi‑product security programs, including AI/ML/LLM systems.
• CISSP or cloud security certifications preferred.
• Strong SDLC risk management and secure design mentoring.

Responsibilities

• Lead threat modelling across architectures and prompt/RAG pipelines.
• Drive secure development training and standards, including AI-assisted coding workflows.
• Oversee vulnerability management, triage, and auto‑remediation tuning.
• Govern AI/ML supply chain and API security across portfolios.
• Ensure CI/CD security integration and auditable trails for auditors.
• Lead incident response and coordinated disclosure across products.
• Establish SSDLC governance and safety guardrails for agent outputs.

Skills

Threat modelling

Incident response

DevSecOps

AI/ML security

Vulnerability management

Security governance

LLM security

Python/TypeScript

Education

BA/BS degree

CISSP

Tools

Azure DevOps

Snyk

Kubernetes

OWASP ZAP

Job description

Norstella seeks a Senior Product Security Engineer, AI ML to lead the security program across multiple products, focusing on AI/ML governance, secure SDLC, and threat modeling for the Forge platform and Sage KB ecosystem. The role partners with engineering to embed guardrails and ensure HIPAA, GDPR, SOC 2, and FDA readiness.

You will mentor engineers, drive vulnerability management, and coordinate cross‑product incident response, while shaping DevSecOps practices and risk-informed decision