Senior AI Security Engineer: Adversarial & Cloud Defense

Envestnet; United States; Hybrid; USD 139,000 - 173,000; Full time

Benefits offered by this job

Medical insurance

Paid time off

401k company match

Education reimbursement

Job summary

Envestnet's Technology team is seeking a seasoned Information Security Engineer to strengthen AI security across our platforms. You will assess security posture, implement controls, and collaborate with product, operations, and stakeholders to enable secure AI-enabled solutions.

This hybrid role based in Berwyn offers a path to influence security at scale, with cutting-edge cloud/on-premise workloads, and opportunities to lead adversarial testing and risk-based improvements.

Qualifications

• Progressive experience in security engineering, security architecture, cloud security, application security, or identity/security platform engineering in enterprise cybersecurity roles.
• Hands-on experience securing AI/ML systems, AI-enabled applications, and agentic ecosystems — including AI governance, agent frameworks, RAG architectures, and LLM integrations — with experience leading the security architecture, implementation, and assessment of AI platforms such as AWS Bedrock, Claude, Microsoft Copilot, GitHub Copilot, Kiro, and MCP integrations.
• Demonstrated experience securing and assessing authentication, authorization, and trust models across complex enterprise and AI environments, including delegated access, workload identities, service principals/accounts, API keys, OAuth/OIDC flows, token delegation, agent impersonation, consent models, permissions, delegated workflows, data access controls, autonomous actions, and cross-system trust relationships.
• AI-specific threat knowledge — experience identifying and mitigating AI-specific attack vectors: prompt injection, jailbreaking, model/data exfiltration, data poisoning, and insecure output handling in LLM-integrated systems.
• Securing AI-assisted development and product-line AI implementation — experience assessing risks AI tools and AI-driven features introduce across the software lifecycle, from code generation to production deployment.

Responsibilities

• Provides Information Security Engineering support across broad areas of the company.
• Develops and executes security controls and reports, defenses and countermeasures to detect, analyze, investigate and respond to internal or external attacks and infiltration attempts.
• Leads or provides direction for Information Security Engineering projects.
• Provides complex analysis of potential risks to information systems security and recommends innovative solutions.
• Recommends and implements changes to procedures and systems to enhance information systems security.
• Integrates network security controls into an environment to identify risks and reduce their impact.
• Provides guidance and advice to less experienced team members.
• Secure AI platforms, agents, MCP integrations, plugins, toolchains, and agent-to-agent workflows through architecture reviews, risk assessments, and control validation.
• Implement and enhance AI security controls, including data protection, model governance, source code safeguards, and AI-specific risk mitigation capabilities.
• Develop and maintain AI security monitoring, detection, investigation, and incident response capabilities to identify and respond to threats across AI environments.
• Conduct and participate in adversarial testing, threat assessments, and red/purple team exercises involving AI systems, while evaluating emerging AI technologies, attack techniques, and security risks to enable secure adoption.

Skills

Security engineering

Security architecture

Cloud security

Application security

Identity/security engineering

AI security

Education

Bachelor’s degree in computer science, Information Security, Engineering, or related field

Tools

AWS Bedrock

Claude

Microsoft Copilot

GitHub Copilot

Kiro

MCP integrations

Job description

Envestnet's Technology team is seeking a seasoned Information Security Engineer to strengthen AI security across our platforms. You will assess security posture, implement controls, and collaborate with product, operations, and stakeholders to enable secure AI-enabled solutions.

This hybrid role based in Berwyn offers a path to influence security at scale, with cutting-edge cloud/on-premise workloads, and opportunities to lead adversarial testing and risk-based improvements.