Senior AI/ML Security Engineer - Secure AI SDLC (Remote)

Norstella; Lansing (MI); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical & Prescription Drug Benefits

Health Savings Account (HSA)

Dental & Vision Benefits

401k with company match

Paid Parental Leave

Paid Time Off

Job summary

Norstella is seeking a Senior Product Security Engineer focused on AI/ML to lead multi‑product security efforts, mentor the Forge platform team, and enforce DevSecOps practices across the autonomous SDLC. The role emphasizes securing code, prompts, data, and agent orchestration in a HIPAA/GDPR/SOC 2 compliant environment.

You’ll partner with engineering to embed guardrails, drive threat modelling, and manage vulnerability and supply chain risk across cloud environments and AI services.

Qualifications

• Bachelor's degree or equivalent experience; security or cloud certifications preferred (CISSP, OSWE).
• 4+ years across multi-product security programs, with AI/ML or LLM‑powered systems in production.

Responsibilities

• Lead threat modelling across complex architectures and mentor engineers.
• Lead secure development training across product groups and evolve standards.
• Manage vulnerability programs and tune SAST/SCA gating and triage logic.
• Oversee AI/ML supply chain risk assessments and API governance across products.
• Integrate security into CI/CD and multi‑cloud, ensuring auditable trails for regulators.
• Coordinate incident response and advise leadership on high‑severity events.
• Establish safe design principles for AI/ML models and ensure least-privilege access.
• Govern SSDLC and ensure agentic outputs meet policy and compliance.
• Instrument observability to audit decisions across agent execution graphs.

Skills

AI/ML security

Threat modeling

Secure SDLC

Vulnerability management

CI/CD security

Cloud security

Python/TypeScript

SOC 2/HIPAA/GDPR knowledge

LLM tooling

Education

Bachelor's degree

Tools

LangGraph

CrewAI

Pinecone

Weaviate

Qdrant

Snyk

Azure DevOps

Job description

Norstella is seeking a Senior Product Security Engineer focused on AI/ML to lead multi‑product security efforts, mentor the Forge platform team, and enforce DevSecOps practices across the autonomous SDLC. The role emphasizes securing code, prompts, data, and agent orchestration in a HIPAA/GDPR/SOC 2 compliant environment.

You’ll partner with engineering to embed guardrails, drive threat modelling, and manage vulnerability and supply chain risk across cloud environments and AI services.