Senior AI Security Engineer

Mercola

. Own the incident queue, risk register, and remediation backlog .

Posted 11/9/2026full-timeRemote • Florida • United StatesSenior💰 $130,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering and incident response, with a strong focus on securing hybrid environments across Microsoft 365, Entra ID, and AWS. Proficient in using AI assistants for threat analysis and automation while ensuring compliance and effective risk management.

Highest-signal resume keywords

Security EngineeringIncident ResponseMicrosoft 365 SecurityAI Assistant UtilizationPython Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseSecurity EngineeringRisk ManagementLog InterpretationAPI SecurityCode ReviewSecurity AutomationData Exposure AssessmentVulnerability RemediationSecurity Testing

Soft Skills

Clear CommunicationSound JudgmentPrioritizationCollaborationLeadership

Tools & Technologies

Microsoft DefenderAWSAzure DevOpsCI/CD WorkflowsGitSIEMMCP IntegrationsPowerShellAI AssistantsEndpoint Protection

Industry Keywords

Hybrid EnvironmentsComplianceData PrivacySecurity AwarenessIncident TriageThreat AnalysisAccess ControlApplication SecurityCloud SecurityGovernance

Tech Stack

Tools & technologies

AWSAzureCloudPython

About the role

Key responsibilities & impact

Own the incident queue, risk register, and remediation backlog
Assign owners and deadlines, maintain policies and runbooks, and report progress and unresolved risks to leadership
Lead technical incident response from triage through recovery validation
Coordinate containment, preserve evidence, and involve Legal or specialist responders as needed
Strengthen identity, access, and infrastructure controls across Microsoft 365, Entra ID, AWS, and connected applications
Partner with Infrastructure to verify improvements across endpoints, servers, networks, and cloud platforms
Validate logging coverage, retention, alert delivery, and after-hours escalation
Use AI assistants for investigation, code review, threat analysis, and automation
Independently validate AI findings and proposed fixes
Secure AI applications, agents, and MCP integrations against prompt injection, excessive permissions, data exposure, and unsafe tool actions
Partner with Engineering on application, API, and mobile security
Integrate code, dependency, and secret scanning into development workflows
Prioritize exploitable findings, coordinate authorized testing, and verify remediation
Build security automation with Python, PowerShell, APIs, or comparable tools
Document ownership, failure alerts, audit trails, and rollback procedures
Assess vendor security, data flows, and third-party access
Maintain security evidence for contractual, privacy, and compliance needs
Coordinate security awareness and specialist support
Establish clear ownership, an actionable risk backlog, dependable monitoring, tested escalation, verified control closure, repeatable automation, and safe AI-assisted workflows during the first 90 days

Requirements

What you’ll need

Hands-on experience in security engineering, incident response, or security operations
Experience taking security issues through investigation, remediation, and verification
Practical experience securing hybrid environments across Microsoft 365, Entra ID, AWS, endpoints, and networks
Ability to interpret logs and assess access, application permissions, and potential data exposure
Experience using AI assistants in engineering or security work
Ability to limit permissions, protect sensitive information, and validate AI-generated output
Ability to write scripts, work with APIs, and review application code or configurations for security issues
Familiarity with Git and CI/CD workflows
Ability to prioritize competing security work and coordinate technical owners and providers
Ability to communicate risks and decisions clearly to leadership
Sound judgment about evidence preservation, testing authorization, production changes, and involving specialists
Relevant certifications or a degree are welcome, but demonstrated capability and equivalent experience are valued equally
Experience with Microsoft Defender or comparable endpoint protection, SIEM, or managed detection services is preferred
Experience with Azure DevOps, application or API security testing, cloud or container security, or governance of AI coding tools and MCP integrations is preferred

Benefits

Comp & perks

Medical, Dental, and Vision coverage
Optional Accident, Hospital Indemnity, and Critical Illness
Employee Assistance Program (EAP)
Employer-paid Life and AD&D Insurance
Optional Supplemental Life and AD&D Insurance
Short- and Long-Term Disability Insurance
Flexible Spending Accounts
Health Savings Accounts
Dayforce Wallet – get paid as you earn
Employee Discount
Retirement Planning (401k with matching contribution)
Pet Insurance
Wellness Program Offerings
Paid Time Off, accrued per pay period based on years of service, starting at 15 days annually
9 Paid Holidays per year, including 1 floating holiday
Direct access to leadership
Opportunity to shape Mercola’s dedicated Security function
Hands-on role spanning enterprise incident response, security automation, and AI security