Senior AI/ML Product Security Engineer (Remote)

Norstella; Topeka (KS); Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Health Savings or Flexible Spending

401k with company match

Paid time off

Job summary

Norstella is seeking a Senior Product Security Engineer focused on AI/ML to lead multi‑product security, mentor teams, and embed security guardrails across the Forge platform and Sage KB ecosystem. You will own the safety posture of autonomous AI agent chains end‑to‑end, aligning with HIPAA, GDPR, SOC 2 and FDA 21 CFR Part 11 requirements.

You will influence threat modelling, vulnerability management, CI/CD security, and AI/ML governance across cloud environments, ensuring auditable, compliant,

Qualifications

• BA/BS degree or equivalent; CISSP/OSWE or cloud security certs preferred.
• 4+ years in multi-product security programs; 1–2 years AI/ML or LLM‑powered systems in production.
• Experience integrating security into SDLC, including agentic/AI-assisted patterns.

Responsibilities

• Lead threat modelling across complex architectures and mentor engineers.
• Lead secure development training and establish standards (OWASP LLM Top 10).
• Manage vulnerability and triage—tune SAST/SCA gating and auto‑remediation.
• Oversee AI/ML supply chain risk assessments and API governance.
• Integrate security into CI/CD and multi‑cloud, ensure auditable decision trails.
• Serve as IR lead for cross‑product incidents and disclosures.
• Define safe design principles for AI/LLM outputs and agentic workflows.
• Govern SSDLC, ensure controls for non‑deterministic, agent‑driven development.

Skills

LLM security

Threat modeling

SAST/SCA

CI/CD security

Cloud security

Python/TypeScript

Auditing & compliance

Education

BA/BS degree or equivalent

CISSP/OSWE/cloud security certs

AI/ML security credentials

Tools

LangGraph

CrewAI

Autogen

Semantic Kernel

Pinecone

Weaviate

Qdrant

pgvector

Claude / GPT-4

Job description

Norstella is seeking a Senior Product Security Engineer focused on AI/ML to lead multi‑product security, mentor teams, and embed security guardrails across the Forge platform and Sage KB ecosystem. You will own the safety posture of autonomous AI agent chains end‑to‑end, aligning with HIPAA, GDPR, SOC 2 and FDA 21 CFR Part 11 requirements.

You will influence threat modelling, vulnerability management, CI/CD security, and AI/ML governance across cloud environments, ensuring auditable, compliant,