Staff Information Security Engineer

Rithum

. Bridge architectural intent and operational reality by resolving conflicts between security requirements and feasible implementation .

Posted 11/2/2026full-timeRemote • United StatesLead💰 $170,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering with a focus on AI/ML security, including identity and access management, policy-as-code implementation, and threat modeling. Proficient in integrating security tools and automating workflows to enhance security posture across cloud and enterprise environments.

Highest-signal resume keywords

AI/ML Security ExpertiseIdentity And Access ManagementPolicy-As-Code ImplementationCloud Security ExpertiseThreat Modeling Methodologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringAI Tools ExperienceInfrastructure As CodeScripting Language ProficiencyApplication Security KnowledgeThreat ModelingAutomation SkillsVulnerability ScanningSecurity Control ImplementationAI Agent Development

Tools & Technologies

TerraformOPA/RegoSIEMCSPMSASTDASTLLM FrameworksChatGPTCopilotClaude

Certifications & Qualifications

AWS Solutions ArchitectSecurity SpecialtySOC 2ISO 27001

Industry Keywords

Policy-As-CodeCloud SecurityIdentity And Access ControlsAI SystemsAdversarial InputsPrompt InjectionResidual RisksPreventive GuardrailsSecure SDLCMulti-Account Governance

Tech Stack

Tools & technologies

AWSCloudPythonSDLCTerraform

About the role

Key responsibilities & impact

Bridge architectural intent and operational reality by resolving conflicts between security requirements and feasible implementation
Propose compensating controls and help register, track, and remediate residual risks
Implement preventive, default-on security controls across cloud and enterprise environments
Codify security controls as policy-as-code and infrastructure-as-code, including controls governing AI tools and models
Implement and enforce identity and access controls, including boundaries for AI systems and non-human or agent identities
Partner with Platform Engineering and IT to align tooling and policy with architecture
Maintain the InfoSec risk register and translate emerging threats into actionable guidance for engineering teams
Support third-party and vendor risk assessments, especially for vendors processing data through AI pipelines
Automate security workflows such as evidence collection, access reviews, and alert enrichment
Build or operate AI-assisted security agents with human-in-the-loop approval gates and least-privilege credentials
Integrate SIEM, CSPM, DAST/SAST, and vulnerability scanners with LLM layers
Define and enforce security requirements for AI-powered features, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries
Conduct threat modelling on agentic and LLM-based systems
Collaborate with Platform Engineering, IT, Security Champions, and external auditors

Requirements

What you’ll need

5+ years of security engineering experience with demonstrated AI/ML security depth, including prompt injection, model supply chain, adversarial inputs, and RAG
Experience using AI tools such as ChatGPT, Copilot, and Claude
Experience with LLM frameworks and APIs such as OpenAI, Anthropic, LangChain, or similar
Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including AI systems and non-human identities
Experience with infrastructure and policy-as-code, such as Terraform and OPA/Rego
Proficiency in a scripting language for automation; Python preferred
Cloud security expertise, including AWS Solutions Architect / Security Specialty or equivalent demonstrated expertise, multi-account governance, preventive guardrails, and policy-as-code
Application security knowledge, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC
Knowledge of threat-modelling methodologies such as STRIDE or PASTA
Practical experience building or operating AI agents
Experience integrating SIEM, CSPM, SAST/DAST/SCA tooling to surface actionable information
Working knowledge of SOC 2 and/or ISO 27001 control frameworks
Up to 10% travel required

Benefits

Comp & perks

Discretionary bonus of 12% of annual base salary
Medical, dental and vision benefits with affordable health care plans and company HSA contributions, starting on Day 1
6% 401(k) match
20 days of Paid Time Off
9 Company-Paid holidays
2 paid floating holidays
7 paid sick days
2 Wellness days
1 Paid Volunteer Day
PTO increases to 22 days at 3 years of service and 25 days at 5 years
12 weeks primary caregiver leave
4 weeks secondary caregiver leave
Accident, critical illness, and hospital indemnity insurance
Pet insurance
Legal assistance and identity theft insurance plans
Life insurance of 2x salary
Calm app access
Employee Assistance Program
$65/month remote work stipend for internet
Culture and team-building activities
Tuition assistance
Career development opportunities
Charitable contribution match up to $250 per year
Remote-first working conditions
Industry-competitive compensation and total rewards benefits