Staff AI Security Engineer — Remote-First & Guardrails

Rithum; Oregon; Ibrido; USD 170.000 - 220.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health benefits

401(k) match

Paid time off

Remote work stipend

Descrizione del lavoro

Rithum is seeking a Staff Information Security Engineer to own the AI security strategy across AI-powered products and workflows. You will design guardrails, automate security tooling, and embed security controls in infrastructure-as-code while collaborating with Platform Engineering, IT, and external auditors.

You will implement preventative controls across cloud environments, enforce identity boundaries for AI systems, and support risk assessments with a focus on AI pipelines.

Competenze

• 5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs).
• Experience using AI tools and LLM frameworks and APIs to accelerate and elevate your work.
• Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities.
• Infrastructure and policy-as-code (Terraform, OPA/Rego) and proficiency in Python for automation.
• Cloud security expertise: AWS Solutions Architect/Security Specialty or equivalent with multi-account governance, preventive guardrails, and policy-as-code.
• Application security (OWASP Top 10 and LLM/GenAI Top 10, secure SDLC) and threat-modelling methodologies (STRIDE/PASTA).
• Knowledge of SOC 2 and/or ISO 27001 control frameworks.

Mansioni

• Act as the bridge between architectural intent and operational reality; mediate conflicts between security requirements and feasible implementation, propose compensating controls where gaps exist and help register, track and remediate residual risks.
• Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code so security is enforced by design, including controls for AI tools and models.
• Implement and enforce identity and access controls to an agreed standard, including access boundaries for AI systems and non-human identities by partnering with Platform Engineering and IT.
• Assist in maintaining the InfoSec risk register; track emerging threats and translate them into actionable guidance for engineering teams.
• Support third‑party and vendor risk assessments, focusing on vendors who process data through AI pipelines.
• Automate repetitive security workflows (evidence collection, access reviews, alert enrichment) and build or operate AI-assisted security agents with human-in-the-loop approval gates.
• Integrate security tooling (SIEM, CSPM, SAST/DAST/SCA) with LLM layers to surface actionable insight and automated responses.
• Define and enforce security requirements for AI-powered features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
• Conduct threat modelling on agentic and LLM-based systems, accounting for novel attack surfaces.

Conoscenze

AI/ML security depth

Identity & access management

Policy-as-code

Cloud security

Application security & SDLC

Threat modelling

SOC 2/ISO 27001

Security tooling

Strumenti

Terraform

OPA/Rego

Python

AWS

SAST/DAST/SCA tools

SIEM/CSPM/DAST

LLM frameworks/APIs (OpenAI, Anthropic)

LangChain

Descrizione del lavoro

Rithum is seeking a Staff Information Security Engineer to own the AI security strategy across AI-powered products and workflows. You will design guardrails, automate security tooling, and embed security controls in infrastructure-as-code while collaborating with Platform Engineering, IT, and external auditors.

You will implement preventative controls across cloud environments, enforce identity boundaries for AI systems, and support risk assessments with a focus on AI pipelines.