Staff Information Security Engineer

New

RithumE-commerce security

United States - RemoteFull-TimeStaff

SalaryThe expected base pay range is: $170,000-$220,000 per year. The expected discretionary bonus is 12% of the annual base salary.

Apply NowOpens the employer's application page

Job Details

Have 5+ years of security engineering experience with demonstrated AI/ML security depth, including prompt injection, model supply chain, adversarial inputs, and RAG.
Have experience using AI tools such as ChatGPT, Copilot, or Claude, and LLM frameworks and APIs such as OpenAI, Anthropic, or LangChain.
Bring hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities.
Have infrastructure and policy-as-code experience, such as Terraform and OPA/Rego, and proficiency in a scripting language for automation; Python is preferred.
Have cloud security expertise, including multi-account governance, preventive guardrails, and policy-as-code; AWS Solutions Architect / Security Specialty or equivalent demonstrated expertise is specified.
Know application security, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC.
Know threat-modelling methodologies such as STRIDE, PASTA, or equivalent.
Have practical experience building or operating AI agents and integrating security tooling such as SIEM, CSPM, and SAST/DAST/SCA.
Have working knowledge of SOC 2 and/or ISO 27001 control frameworks.
Travel up to 10%.

Bridge architectural intent and operational implementation, propose compensating controls, and track and remediate residual risks.
Implement preventive security controls across cloud and enterprise environments using policy-as-code and infrastructure-as-code.
Implement identity and access controls, including boundaries for AI systems and non-human identities, with Platform Engineering and IT.
Maintain the InfoSec risk register, track emerging threats, and provide actionable guidance to engineering teams.
Support third-party and vendor risk assessments, focusing on vendors that process data through AI pipelines.
Automate security workflows and build or operate AI-assisted security agents with human approval gates and least-privilege credentials.
Integrate SIEM, CSPM, DAST/SAST, and vulnerability-scanning tools with LLM layers to surface actionable insights and automated responses.
Define and enforce security requirements for AI features, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
Threat-model agentic and LLM-based systems, including tool misuse, indirect prompt injection, and supply-chain risks.

View Full Description & ApplyYou'll be redirected to the employer's site