Senior AI Security Engineer

Cybersecurity Jobs; Seattle (WA); On-site; USD 155,000 - 200,000; Full time

Benefits offered by this job

full benefits

PTO

holiday

401(k)

Job summary

Teleion Consulting is hiring a hands-on, client-facing Senior AI Security Engineer to protect AI workloads across the full AI stack. The role is onsite in Seattle, WA and is a contract position with a salary range of USD 155,000 to 200,000 per year.

You will evaluate AI/LLM attack surfaces, deploy centralized controls, and build monitoring and adversarial testing to identify weaknesses early, while guiding clients on governance aligned to industry frameworks.

Qualifications

• 7+ years of security engineering experience.
• At least 2 years directly securing AI/GenAI in production.
• Experience securing LLM and agent attack surfaces.
• Familiar with AI gateways/LLM proxies and audit logging.
• Azure security expertise, incl. Entra ID and Defender.
• Proficient in Python and LLM APIs (OpenAI, Anthropic, Azure OpenAI).
• Knowledge of OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF.
• Certifications preferred: CISSP, AZ-500, SC-100, CCSP.

Responsibilities

• Assess AI/LLM attack surfaces in production environments.
• Deploy and operate AI gateways, LLM proxies with guardrails and audit logging.
• Design governance for agentic systems and MCP tooling.
• Implement identity and authorization for non-human, AI identities.
• Extend zero trust controls to AI workloads across pillars.
• Lead AI red team and adversarial testing using PyRIT, Garak.
• Perform third-party AI vendor security reviews and governance guidance.

Skills

Python

LLM security

Cloud security

Security engineering

Tools

PyRIT

Garak

OpenAI APIs

Azure OpenAI

Job description

Teleion Consulting is hiring a hands-on, client-facing Senior AI Security Engineer to help protect AI workloads across the full AI stack. You will focus on securing AI workloads, agentic systems, and enterprise AI deployments, including LLMs, AI gateway/proxy layers, agentic pipelines, and zero trust controls. The role is onsite in Seattle, WA and offered on a contract basis with a salary range of USD 155,000 to 200,000 per year.

In this position, you’ll strengthen production security by evaluating AI and LLM attack surfaces, deploying centralized controls, and building monitoring and adversarial testing to identify weaknesses early. You’ll also support clients with AI governance guidance aligned to industry frameworks.

Responsibilities

• Assess and address the AI and LLM attack surface in production environments, including prompt injection (direct and indirect), data leakage through model output, insecure tool use, jailbreaking, and model supply chain risk.
• Deploy, configure, and operate AI gateways and LLM proxy layers with centralized control, including model allowlists, per-team API keys, rate and budget limits, centralized audit logging, and inline input/output guardrails for prompt injection, sensitive data egress, credential leakage, and unsafe output.
• Design and implement governance frameworks for agentic systems and MCP (Model Context Protocol) tooling, including registries, approval workflows, runtime policy enforcement, and identity and authorization patterns for non-human identities.
• Implement OAuth-based access, token lifecycle management, and scoped tool permissions for AI agents using least-privilege principles.
• Extend zero trust controls to AI workloads across identity, device, network, application, and data pillars, with Azure preferred (Entra ID, Defender for Cloud, Key Vault, Purview, Conditional Access).
• Build monitoring and detection capabilities for AI systems, including prompt behavior analysis, tool invocation patterns, anomalous output detection, and data movement tracking.
• Perform AI red team and adversarial testing using PyRIT, Garak, or equivalent tooling to identify vulnerabilities before adversaries do.
• Lead shadow AI discovery programs to identify unsanctioned AI applications and browser extensions across the enterprise.
• Conduct third-party AI vendor security reviews and assess M365 Copilot security posture, including oversharing remediation and sensitivity label enforcement.
• Advise clients on AI governance frameworks including OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, and relevant compliance standards.
• Perform tasks as assigned.

Requirements

• 7+ years of security engineering experience, including at least 2 years directly securing AI, ML, or GenAI systems in production environments.
• Hands-on experience securing LLM and agent attack surfaces, including prompt injection, jailbreaking, data extraction, capability chaining, and supply chain risk.
• Experience deploying or operating an AI gateway, LLM proxy, or centralized AI control plane with production-grade input/output guardrails and audit logging.
• Familiarity with agentic AI risk classes: excessive agency, capability chaining, tool and memory poisoning, and unsafe autonomous action.
• Experience implementing identity and authorization patterns for non-human identities in an AI or service-oriented context.
• Strong cloud security background with Azure preferred, including Entra ID, Defender for Cloud, Key Vault, Purview, and Conditional Access.
• AI red team experience using PyRIT, Garak, or equivalent adversarial testing tools.
• Proficiency in Python, with experience working with LLM APIs (OpenAI, Anthropic, Azure OpenAI) and security evaluation tooling.
• Knowledge of OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
• Certifications preferred: CISSP, AZ-500, SC-100, or CCSP. Familiarity with ISO/IEC 42001 or EU AI Act is a plus.

Benefits

• full benefits
• PTO
• holiday
• 401(k)

Technologies: Python, OAuth, PyRIT, Garak, MCP (Model Context Protocol), OpenAI, Anthropic, Azure OpenAI, Azure, Entra ID, Defender for Cloud, Key Vault, Purview, Conditional Access, M365 Copilot, OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, ISO/IEC 42001, EU AI Act, CISSP, AZ-500, SC-100, CCSP