Senior AI/ML Security Engineer – Secure SDLC, Remote

Norstella; Salem (OR); Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical benefits

HSA/FSA

Dental & Vision

Life/AD&D

401k match

Disability

Parental leave

PTO & holidays

Job summary

Norstella is seeking a Senior Product Security Engineer to lead multi-product security efforts for an AI/ML driven platform. You will mentor engineers, coordinate incident response, and embed security guardrails across the autonomous SDLC, ensuring HIPAA, GDPR, SOC 2, and FDA 21 CFR Part 11 compliance.

You will collaborate with Forge engineering, protect the knowledge-base ecosystem, and govern AI/ML supply chains while advancing secure design practices in a fast-paced, regulatory environment.

Qualifications

• BA/BS degree or equivalent experience in a relevant field.
• Security certifications (CISSP, OSWE) preferred.
• Experience with AI/ML security in production environments.
• Knowledge of SOC 2, HIPAA, GDPR, FDA 21 CFR Part 11 is a plus.

Responsibilities

• Lead threat modeling across complex agent-to-agent architectures.
• Mentor engineers in risk analysis and secure design practices.
• Oversee vulnerability management and triage across products.
• Ensure security across CI/CD and multi-cloud deployments.
• Coordinate incident response and governance for the agentic SDLC.

Skills

Python

TypeScript

Secure SDLC

IAM/Secrets management

Threat Modeling

Vulnerability Management

AI/ML Security

CI/CD Security

Automation

Education

BA/BS degree or equivalent experience

CISSP

OSWE

Cloud security specialties

AI Security credentials (AI Security Institute / MLSecOps)

Tools

LangGraph

CrewAI

Autogen

Semantic Kernel

MCP

Pinecone

Weaviate

Qdrant

pgvector

AWS

GCP

Azure

Job description

Norstella is seeking a Senior Product Security Engineer to lead multi-product security efforts for an AI/ML driven platform. You will mentor engineers, coordinate incident response, and embed security guardrails across the autonomous SDLC, ensuring HIPAA, GDPR, SOC 2, and FDA 21 CFR Part 11 compliance.

You will collaborate with Forge engineering, protect the knowledge-base ecosystem, and govern AI/ML supply chains while advancing secure design practices in a fast-paced, regulatory environment.