Senior AI Security Engineer

Teleion Consulting LLC.; Seattle (WA); On-site; USD 155,000 - 200,000; Full time

Benefits offered by this job

Full benefits

PTO

Holiday

401(k)

Job summary

Teleion Consulting LLC seeks a Senior AI Security Engineer to protect AI workloads, agentic systems, and enterprise deployments. This is a hands-on, client-facing role focusing on securing LLMs, AI gateways, and zero-trust infrastructure.

The role requires production experience with AI security, governance knowledge (OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF), and strong Azure/Entra ID integration. You will lead security reviews, red-team tests, and policy enforcement.

Qualifications

• 7+ years security engineering experience, with ≥2 years securing AI/GenAI in production.
• Hands-on experience with LLM/agent attack surfaces and risk mitigation.
• Experience deploying AI gateways/LLM proxies with guardrails and audit logging.
• Knowledge of AI governance and compliance frameworks (OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF).

Responsibilities

• Assess AI/LLM attack surfaces in production and address prompt injection and data leakage.
• Deploy and operate AI gateways/LLM proxies with centralized controls and audit logs.
• Design governance for agentic systems and MCP tooling with enforcement policies.
• Implement identity/authorization patterns for non-human AI identities.
• Extend zero-trust controls across identity, device, network, and data pillars.
• Build monitoring for AI systems and perform red-team testing with PyRIT or equivalent.

Skills

Security engineering

AI security

Python

Cloud security

Education

CISSP

AZ-500

SC-100

CCSP

Tools

Azure OpenAI

LLM APIs

Job description

• Must be living in the following states to be considered: Florida (FL), Georgia (GA) , Illinois (IL), Iowa (IA), Nevada (NV), North Carolina (NC), South Dakota (SD), Texas (TX), Washington (WA), Virginia (VA), Wisconsin (WI)

Senior AI Security Engineer

About the Role

Teleion is seeking a Senior AI Security Engineer to help clients safeguard their AI workloads, agentic systems, and enterprise AI deployments. This is a hands-on, client-facing contract role at the frontier of a rapidly emerging discipline — securing large language models, AI gateways, agentic pipelines, and the zero trust infrastructure that surrounds them. The ideal candidate has direct production experience securing AI systems, understands the adversarial attack surface against LLMs and agents, and can design and implement the technical controls that manage risk across the full AI stack.

Responsibilities

• Assess and address the AI and LLM attack surface in production environments: prompt injection (direct and indirect), data leakage through model output, insecure tool use, jailbreaking, and model supply chain risk.
• Deploy, configure, and operate AI gateways and LLM proxy layers with centralized control: model allowlists, per-team API keys, rate and budget limits, centralized audit logging, and inline input/output guardrails covering prompt injection, sensitive data egress, credential leakage, and unsafe output.
• Design and implement governance frameworks for agentic systems and MCP (Model Context Protocol) tooling: registries, approval workflows, runtime policy enforcement, and identity and authorization patterns for non-human identities.
• Implement OAuth-based access, token lifecycle management, and scoped tool permissions for AI agents operating with least-privilege principles.
• Extend zero trust controls to AI workloads across identity, device, network, application, and data pillars — with Azure preferred (Entra ID, Defender for Cloud, Key Vault, Purview, Conditional Access).
• Build monitoring and detection for AI systems: prompt behavior analysis, tool invocation patterns, anomalous output detection, and data movement.
• Conduct AI red team and adversarial testing using PyRIT, Garak, or equivalent tooling to identify vulnerabilities before adversaries do.
• Perform third-party AI vendor security reviews and assess M365 Copilot security posture including oversharing remediation and sensitivity label enforcement.
• Advise clients on AI governance frameworks including OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, and relevant compliance standards.
• Perform tasks as assigned

Requirements

• 7 or more years of security engineering experience, with at least 2 years directly securing AI, ML, or GenAI systems in production environments.
• Demonstrated hands-on experience with LLM and agent attack surfaces: prompt injection, jailbreaking, data extraction, capability chaining, and supply chain risk.
• Experience deploying or operating an AI gateway, LLM proxy, or centralized AI control plane with production-grade input/output guardrails and audit logging.
• Familiarity with agentic AI risk classes: excessive agency, capability chaining, tool and memory poisoning, and unsafe autonomous action.
• Experience implementing identity and authorization patterns for non-human identities in an AI or service-oriented context.
• Strong cloud security background with Azure preferred — Entra ID, Defender for Cloud, Key Vault, Purview, and Conditional Access.
• AI red team experience using PyRIT, Garak, or equivalent adversarial testing tools.
• Proficiency in Python with experience working with LLM APIs (OpenAI, Anthropic, Azure OpenAI) and security evaluation tooling.
• Knowledge of OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
• Certifications preferred: CISSP, AZ-500, SC-100, or CCSP. Familiarity with ISO/IEC 42001 or EU AI Act is a plus.

Teleion offers full benefits, PTO, holiday, 401(k). See how other employees have reviewed us on Glassdoor. We are excited to announce we have made in on Seattle Business Magazines "Washingtons Best Place to Work" for the 6th year in a row. (https://seattlebusinessmag.com/100-best-companies-work/100-best-companies-work-midsize)

Teleion is minority owned and an Equal Opportunity Employer – We welcome all races, sexual orientations, gender identities, veterans, religions and disabilities.

Salary range: $155,000 - $200,000 - Based on experience