Staff Information Security Engineer

New

RithumInformation security

United States - RemoteFull-TimeStaff

SalaryThe expected base pay range is: $170,000-$220,000 per year. The expected discretionary bonus is 12% of the annual base salary.

Apply NowOpens the employer's application page

Job Details

Have 5+ years of security engineering experience with demonstrated AI/ML security depth, including prompt injection, model supply chain, adversarial inputs, and RAG.
Have experience using AI tools such as ChatGPT, Copilot, or Claude, and LLM frameworks and APIs such as OpenAI, Anthropic, or LangChain.
Bring hands-on identity and access expertise across modern enterprise and cloud identity stacks, including AI systems and non-human identities.
Have infrastructure-as-code and policy-as-code experience, such as Terraform and OPA/Rego, plus scripting proficiency; Python is preferred.
Have cloud security expertise, including multi-account governance and preventive guardrails; AWS Solutions Architect / Security Specialty or equivalent expertise is accepted.
Know application security, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC.
Have experience with threat-modeling methodologies such as STRIDE or PASTA, or equivalent.
Have practical experience building or operating AI agents and integrating security tooling such as SIEM, CSPM, and SAST/DAST/SCA.
Have working knowledge of SOC 2 and/or ISO 27001 control frameworks.
Travel up to 10%.

Mediate conflicts between security requirements and feasible implementation, propose compensating controls, and track and remediate residual risks.
Implement preventive security controls across cloud and enterprise environments using policy-as-code and infrastructure-as-code.
Enforce identity and access controls, including access boundaries for AI systems and non-human identities, in partnership with Platform Engineering and IT.
Maintain the InfoSec risk register, track emerging threats, and provide actionable guidance to engineering teams.
Support third-party and vendor risk assessments, particularly for vendors processing data through AI pipelines.
Automate security workflows and build or operate AI-assisted security agents with human approval gates and least-privilege credentials.
Integrate SIEM, CSPM, application security, and vulnerability-scanning tools with LLM layers to surface actionable insights and automated responses.
Define and enforce security requirements for AI-powered features, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
Threat-model agentic and LLM-based systems, including tool misuse, indirect prompt injection, and supply-chain risks.

View Full Description & ApplyYou'll be redirected to the employer's site