Senior AI Security Engineer - Cloud & Compliance

NTT DATA AIVista; San Francisco (CA); On-site; USD 350,000 - 400,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

HSA contribution

Paid holidays

Flexible PTO

Job summary

NTT DATA AIVista is seeking a seasoned Security Engineer to own security for AI products, cloud environments, and compliance programs. You will architect security for agentic AI systems, drive threat modeling, and lead a growing security team.

You will establish secure design standards, partner with Engineering, CTO, and IT to implement secure SDLC, and guide auditors and stakeholders through SOC 2 and ISO 27001 programs as the company scales.

Qualifications

• 10+ years in security engineering.
• Hands-on threat modeling and secure design reviews.
• Cloud security expertise (AWS/Azure/GCP).
• Experience securing AI/ML or agentic systems.
• Experience with SOC 2 and ISO 27001 programs.

Responsibilities

• Lead secure design reviews and threat modeling for AI products and multi-agent systems.
• Define security architecture and secure-by-design standards for AI agents and tool usage.
• Embed security into product development lifecycle (secure SDLC, code reviews, supply-chain security).
• Own cloud security architecture across AWS/Azure/GCP, IAM design, network security, baselines, logging.
• Own the company security program, risk register, and policies; oversee audits and compliance tooling.
• Lead incident response and disaster recovery planning; measure and report security risk to leadership.
• Hire, mentor, and lead a security team and liaise with executives, customers, and auditors.

Job description

NTT DATA AIVista is seeking a seasoned Security Engineer to own security for AI products, cloud environments, and compliance programs. You will architect security for agentic AI systems, drive threat modeling, and lead a growing security team.

You will establish secure design standards, partner with Engineering, CTO, and IT to implement secure SDLC, and guide auditors and stakeholders through SOC 2 and ISO 27001 programs as the company scales.