Sr AI Security Engineer

Healthfirst; New York (NY); On-site; USD 135,000 - 194,000; Full time

Benefits offered by this job

Health insurance

Dental and vision coverage

401(k) contributions

Life insurance

Incentive & recognition programs

Job summary

Healthfirst in New York City seeks a Sr AI Security Engineer to continuously monitor vulnerabilities and develop security solutions for AI-enabled infrastructure. The role spans IT, product, and cloud security, with hands-on work on modern AI technologies such as LLMs, RAG, and AI agents.

The engineer will perform security architecture reviews, threat modeling, and hands-on testing of AI systems, partnering with AI engineering teams to implement guardrails and secure CI/CD practices in a

Qualifications

• Technical degree in CS or Cyber Security or equivalent experience.
• Experience in security engineering, vulnerability assessment, threat hunting, and incident response.
• Familiarity with AI security concepts (LLMs, RAG, AI agents) and cloud security.

Responsibilities

• Perform security architecture reviews and threat modeling for AI-enabled applications.
• Conduct hands-on security testing of LLM, RAG, and agentic AI solutions.
• Identify vulnerabilities including prompt injection and data exposure.
• Assess security risks with AI agents, APIs, model integrations, and vector databases.
• Partner with developers to design and implement practical security controls.
• Develop reusable security patterns and guardrails for AI architectures.
• Build or automate security tests and tools for AI apps.
• Protect PHI, PII, credentials, and other sensitive information.
• Evaluate emerging AI security threats and translate findings into engineering guidance.
• Support secure AI development practices across the organization.

Skills

Security engineering

Threat modeling

Security testing

CI/CD security

Python

Cloud security

AI security

Communication

Education

Technical Degree in Computer Science or Cyber Security

High School diploma or GED

Tools

Terraform

Bicep

CloudFormation

Azure OpenAI

AWS Bedrock

Google Vertex AI

Job description

Description and Requirements

The Sr AI Security Engineer continuously monitors the vulnerability of the enterprise and develops engineering solutions to improve the security of the Healthfirst infrastructure. The Sr AI Security Engineer applies expertise across the Cyber Security discipline by demonstrating competency in IT Infrastructure and Application Development. The ideal candidate has a strong background in application, product, or cloud security combined with hands-on knowledge of modern AI technologies such as LLMs, Retrieval-Augmented Generation (RAG), and AI agents.

Duties and Responsibilities

• Perform security architecture reviews and threat modeling for AI-enabled applications.
• Conduct hands-on security testing of LLM, RAG, and agentic AI solutions.
• Identify vulnerabilities including prompt injection, sensitive-data exposure, insecure retrieval, excessive permissions, unsafe tool use, and authorization weaknesses.
• Assess security risks associated with AI agents, APIs, model integrations, vector databases, and third-party AI services.
• Partner with developers and AI engineering teams to design and implement practical security controls.
• Develop reusable security patterns and guardrails for common AI architectures.
• Build or automate security tests and tools used to evaluate AI applications.
• Help protect PHI, PII, credentials, and other sensitive information used by AI systems.
• Evaluate emerging AI security threats and translate relevant findings into engineering guidance.
• Support the organization's broader application security and secure AI development practices.
• Help ensure AI systems handling sensitive healthcare and enterprise information are designed with appropriate security and privacy controls.
• Assess how PHI, PII, and other sensitive information moves through prompts, models, APIs, retrieval systems, embeddings, vector stores, logs, agents, and downstream systems.
• Partner with privacy, compliance, legal, risk, and AI governance teams to translate requirements into practical technical controls.
• Support secure and responsible AI adoption consistent with organizational policies and applicable healthcare and regulatory requirements.
• Additional duties as required.

Minimum Qualifications

• Technical Degree in Computer Science or Cyber Security and/or equivalent work experience
• Prior work Cyber Security work experience
• Experience in security engineering, vulnerability assessment, threat hunting, and incident response
• High School diploma or GED from an accredited institution

Preferred Qualifications

• 5+ years of experience in application security, product security, security engineering, cloud security, offensive security, or a related technical security discipline.
• Strong understanding of application and API security, authentication, authorization, identity, data protection, and secure software development.
• Hands-on experience with security architecture reviews, threat modeling, vulnerability assessment, penetration testing, or security testing.
• Working knowledge of modern AI application architectures, including LLMs, model APIs, RAG, vector databases, and AI agents.
• Understanding of AI security risks such as prompt injection, data leakage, insecure output handling, excessive agency, and unsafe tool or API access.
• Programming or scripting experience, preferably Python.
• Experience working with cloud-based applications and services.
• Ability to communicate technical security risks and remediation recommendations effectively to engineering teams.
• Experience securing production generative AI or LLM applications.
• Experience with AI/LLM security testing or red teaming.
• Familiarity with agentic AI security, including tool permissions and least-privilege access.
• Familiarity with Model Context Protocol (MCP) security considerations.
• Experience with Azure OpenAI, AWS Bedrock, Google Vertex AI, or comparable AI platforms.
• Familiarity with OWASP guidance for LLM/GenAI applications, MITRE ATLAS, or NIST AI security guidance.
• Experience working with PHI, PII, or other sensitive data in a regulated environment.
• Experience integrating security testing into CI/CD or DevSecOps workflows.
• Experience with software supply-chain security and SBOM practices, including assessing third-party libraries, dependencies, models, prompts, and other AI application components for security risk.
• Experience designing secure tool and API consumption patterns for agentic AI, including authentication, authorization, least privilege, trust boundaries, credential management, and control of agent actions.
• Experience reviewing or implementing Infrastructure as Code (IaC) and applying security controls to cloud and AI infrastructure; experience with Terraform, Bicep, CloudFormation, or comparable frameworks preferred.

Compliance and Regulatory Responsibilities

See Above

License/Certification

See Above

Hiring Range

• Greater New York City Area (NY, NJ, CT residents): $134,600 - $194,480
• All Other Locations (within approved locations): $119,600 - $177,905

As a candidate for this position, your salary and related elements of compensation will be contingent upon your work experience, education, licenses and certifications, and any other factors Healthfirst deems pertinent to the hiring decision.

In addition to your salary, Healthfirst offers employees a full range of benefits such as, medical, dental and vision coverage, incentive and recognition programs, life insurance, and 401k contributions (all benefits are subject to eligibility requirements). Healthfirst believes in providing a competitive compensation and benefits package wherever its employees work and live.

The hiring range is defined as the lowest and highest salaries that Healthfirst in "good faith" would pay to a new hire, or for a job promotion, or transfer into this role.

WE ARE AN EQUAL OPPORTUNITY EMPLOYER.

HF Management Services, LLC complies with all applicable laws and regulations. Applicants and employees are considered for positions and are evaluated without regard to race, color, creed, religion, sex, national origin, sexual orientation, pregnancy, age, disability, genetic information, domestic violence victim status, gender and/or gender identity or expression, military status, veteran status, citizenship or immigration status, height and weight, familial status, marital status, or unemployment status, as well as any other legally protected basis. HF Management Services, LLC shall not discriminate against any disabled employee or applicant in regard to any position for which the employee or applicant is otherwise qualified.

If you have a disability under the Americans with Disability Act or a similar law and want a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to [e-mail] or calling 212-519-1798 . In your email please include a description of the accommodation you are requesting and a description of the position for which you are applying. Only reasonable accommodation requests related to applying for a position within HF Management Services, LLC will be reviewed at the e-mail address and phone number supplied. Thank you for considering a career with HF Management Services, LLC.

Know Your Rights