Staff AI-First Information Security Engineer - Remote-First

Rithum; United States; À distance; USD 170 000 - 220 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision coverage

6% 401(k) match

Paid time off & holidays

Remote work stipend

Life insurance

Career development

Résumé du poste

Rithum is hiring a Staff AI-First Information Security Engineer to own the intersection of AI adoption and security. You will design guardrails for AI-powered products, automate tooling, and enforce security controls across AI workflows.

You will collaborate with Platform Engineering, IT, Security Champions, and auditors to move fast without introducing risk. The role balances research with delivery in a security-first, remote-friendly environment.

Qualifications

• 5+ years of security engineering with AI/ML security depth (prompt injection, model supply chain).
• Experience using AI tools and LLM frameworks (ChatGPT, Copilot, Claude; OpenAI, Anthropic, LangChain).
• Hands-on identity and access management across cloud and enterprise.
• Infrastructure and policy-as-code (Terraform, OPA/Rego) and automation scripting (Python).
• Cloud security expertise with multi-account governance and policy-as-code.
• Application security and threat-modelling methodologies (STRIDE, PASTA); AI agents experience.
• Knowledge of SOC 2 and ISO 27001.

Responsabilités

• Bridge between architectural intent and operational reality; mediate security requirements and implement compensating controls.
• Implement preventive, default-on security controls across cloud and enterprise as code.
• Enforce identity and access controls for AI systems; partner with Platform Engineering and IT.
• Maintain InfoSec risk register; translate threats into actionable engineering guidance.
• Support vendor risk assessments focusing on AI data pipelines.
• Automate security workflows and build AI-assisted security agents with human-in-the-loop gates.
• Integrate security tooling (SIEM, CSPM, SAST/DAST) with LLM layers for actionable insight.
• Define security requirements for AI-powered features: access controls, prompt-massage protections, data handling.
• Conduct threat modelling of agentic/LLM systems and novel attack surfaces.

Connaissances

AI/ML security

Identity & access

Infrastructure as code

Cloud security

OWASP/secure SDLC

Threat modelling

Security tooling

SOC 2 / ISO 27001

Outils

Terraform

OPA/Rego

Python

SAST/DAST

SIEM

CSPM

Description du poste

Rithum is hiring a Staff AI-First Information Security Engineer to own the intersection of AI adoption and security. You will design guardrails for AI-powered products, automate tooling, and enforce security controls across AI workflows.

You will collaborate with Platform Engineering, IT, Security Champions, and auditors to move fast without introducing risk. The role balances research with delivery in a security-first, remote-friendly environment.