Senior AI Product Security Engineer

NextGen Healthcare, Inc.; Atlanta (GA); On-site; USD 150,000 - 230,000; Full time

Job summary

NextGen Healthcare, Inc. is seeking a Senior Product Security Engineer to secure AI-powered features and scale the security program across product teams.

You will conduct security reviews, threat modeling, and build security tooling to integrate into CI/CD while collaborating with engineering, product, and legal teams. The role requires 5+ years in product or application security, strong knowledge of security testing methodologies, and experience with AI/LLM security considerations.

Qualifications

• 5+ years of experience in product security, application security, or software engineering.
• Experience with security testing methodologies and tools (static analysis, dynamic analysis, penetration testing).
• Experience threat modeling or penetration testing AI/ML or LLM-backed applications, or participating in AI red-team exercises.
• Experience building internal tooling or agentic automation on top of LLM APIs.

Responsibilities

• Perform security reviews and threat modeling of product features and architectures.
• Develop and maintain security tooling, guidelines, and standards for product development.
• Provide security guidance and support to product teams throughout the software development lifecycle.
• Research and evaluate new security technologies and solutions.
• Integrate security tools into CI/CD and finetune rules to reduce false positives.
• Write scripts to automate manual tasks.
• Perform security reviews and threat modeling of AI/ML and LLM-backed features, including agentic systems, tool/function calling, retrieval-augmented generation (RAG) pipelines, and third-party model integrations.
• Identify and help remediate AI-specific risks such as prompt injection, insecure output handling, training and inference data leakage, excessive agency, model and plugin supply chain compromise, and jailbreak or guardrail bypass.
• Define and maintain secure-by-default patterns for AI development: input/output validation, least-privilege tool and data access for agents, sandboxing of model-generated code, tenant isolation, human-in-the-loop checkpoints, and prompt and system-instruction hygiene.
• Build and run adversarial testing and AI red-teaming exercises against model-backed features; translate findings into reusable regression tests, evals, and detection coverage.
• Establish guardrails, abuse monitoring, rate limiting, and logging for AI endpoints, and partner with detection and response teams on AI-specific incident playbooks.
• Review the security and privacy posture of AI vendors, models, and MCP or plugin-style extensions before adoption, including data handling, retention, and fine-tuning commitments.
• Contribute to internal AI usage policy and governance and help map controls to frameworks such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework.
• Partner with ML/AI engineering, data, legal, and privacy teams to secure the model lifecycle end to end: data sourcing, training, evaluation, deployment, and monitoring.

Skills

Communication

Problem-solving

Independence

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

Static analysis tools

Dynamic analysis tools

Penetration testing tools

Job description

NextGen Healthcare, Inc. is seeking a Senior Product Security Engineer to secure AI-powered features and scale the security program across product teams.

You will conduct security reviews, threat modeling, and build security tooling to integrate into CI/CD while collaborating with engineering, product, and legal teams. The role requires 5+ years in product or application security, strong knowledge of security testing methodologies, and experience with AI/LLM security considerations.