Senior Security Engineer, AI Solutions

Friedman Williams; New York (NY); Vor Ort; USD 180.000 - 260.000; Vollzeit

Zusammenfassung

Friedman Williams is seeking a Senior Security Engineer for AI Solutions in New York to lead security engineering across the AI development lifecycle. You will guide risk assessment, secure architecture, and threat modeling for the firm’s AI-powered tools and platforms.

The role reports to CIO and collaborates with CISO and AI strategy leaders to implement safeguards, governance, and incident response in a fast-evolving enterprise AI environment.

Qualifikationen

• 7+ years in security engineering, security architecture, or related fields, with AI/ML security exposure.
• Strong understanding of AI technologies (LLMs, RAG, agentic AI) and associated risks.
• Experience assessing third-party vendors, SaaS, cloud services, and enterprise apps.
• Expertise in secure architecture, API security, IAM, data protection, and SDLC practices.
• Familiarity with OWASP Top 10, including LLM-specific risks.
• Knowledge of AWS or other cloud platforms and modern enterprise integrations.
• Ability to translate business and regulatory requirements into practical security controls; strong communication.
• Bachelor's or Master's in CS/InfoSec; CISSP/CCSP/CISM a plus.

Aufgaben

• Lead security engineering for AI Solutions within the AI Innovations team.
• Perform security reviews of AI vendors, data flows, and architectures.
• Design secure AI architectures, integrations, APIs, and workflows.
• Conduct AI threat modeling to identify prompt injections and data exposure risks.
• Review code, dependencies, and development practices to find vulnerabilities.
• Collaborate on monitoring, detection, and incident response for AI systems.
• Communicate risks, mitigations, and tradeoffs to IT leadership and stakeholders.

Kenntnisse

AI Security

Threat Modeling

Code Review

Secure SDLC

IAM

Data Protection

Vulnerability Mgmt

OWASP Top 10

Cloud Security

Security Architecture

Vendor Security

Communication

Ausbildung

CS Degree

Tools

SOC 2

ISO Certifications

Jobbeschreibung

Senior Security Engineer, AI Solutions New York New York

Job ID: 21731

Seeking a Senior Security Engineer, AI Solutions to serve as the security engineering lead for its AI and Innovation team and provide technical guidance on securing the Firms expanding ecosystem of AI-powered tools, platforms, and applications.

This role sits at the intersection of AI innovation and enterprise security, helping the Firm adopt and develop AI technologies safely, responsibly, and at scale. As the use of generative AI and agentic AI systems accelerates, the successful candidate will play a critical role in identifying security risks, establishing safeguards, and enabling AI solutions that protect sensitive firm and client information.

Reporting to the Chief Information Officer, the Senior Security Engineer will work closely with the Chief Information Security Officer, Chief AI Strategy & Innovation Officer, and IT leadership to integrate security throughout the AI development and deployment lifecycle.

Key Responsibilities

• AI Security Strategy: Partner with AI, Innovation, IT, and Information Security teams to evaluate AI use cases, assess risks, and develop secure technical approaches that support business objectives.
• Vendor Security Assessments: Conduct technical security reviews of AI vendors and products, evaluating architecture, data flows, security controls, and assurance documentation, including SOC 2 reports, ISO certifications, and penetration test results.
• Secure AI Architecture: Design and review secure architectures for AI applications, agents, integrations, APIs, and workflows, ensuring appropriate authentication, authorization, permissions, and monitoring.
• Application Security & Code Review: Review application architecture, source code, dependencies, and development practices to identify vulnerabilities, insecure coding patterns, access-control weaknesses, and data exposure risks before production deployment.
• AI Threat Modeling: Identify and mitigate AI-specific threats, including prompt injection, unauthorized data access, sensitive information disclosure, insecure tool usage, and vulnerable integrations.
• Security Controls & Governance: Translate firm and client requirements into practical security controls, policies, guardrails, monitoring, and detection capabilities in partnership with IT Compliance and Information Security.
• Monitoring & Incident Response: Collaborate with security leadership to establish appropriate monitoring, threat detection, and incident response processes for AI systems.
• Technical Advisory: Communicate security risks, mitigation strategies, and technical tradeoffs to IT leadership, AI developers, and business stakeholders.

Qualifications

• 7+ years of experience in security engineering, security architecture, application security, cloud security, or a related discipline, including meaningful recent experience with AI/ML or generative AI security.
• Strong understanding of modern AI technologies, including large language models (LLMs), retrieval-augmented generation (RAG), agentic AI, and associated security risks.
• Experience conducting technical security assessments of third-party vendors, SaaS platforms, cloud services, and enterprise applications.
• Expertise in secure architecture, application and API security, identity and access management, data protection, vulnerability management, and secure software development lifecycle (SDLC) practices.
• Experience with threat modeling, source code reviews, secure coding principles, and the OWASP Top 10, including the OWASP Top 10 for LLM Applications.
• Familiarity with AWS or other major cloud platforms, enterprise integrations, networking, firewalls, proxies, and modern SASE solutions.
• Ability to translate business, contractual, regulatory, and client security requirements into practical technical controls and safeguards.
• Strong communication and problem-solving skills, with the ability to explain complex security issues to technical and non-technical audiences.
• Ability to exercise sound judgment in a rapidly evolving environment and balance security requirements with innovation.
• Experience in a law firm or professional services environment preferred.
• Bachelors or masters degree in Computer Science, Cybersecurity, Information Security, or a related field preferred; equivalent experience will be considered.
• Certifications such as CISSP, CCSP, or CISM are a plus.
• Flexibility to adjust working hours to meet business needs.