Staff Information Security Engineer – AI First

Rithum

. Bridge architectural intent and operational reality by resolving conflicts between security requirements and feasible implementation .

Posted 10/15/2026full-timeRemote • United StatesLead💰 $170,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in security engineering with a focus on AI/ML security, including identity and access management, infrastructure-as-code, and cloud security. Proficient in implementing security controls, threat modeling, and integrating security tools to enhance operational security.

Highest-signal resume keywords

AI/ML Security ExpertiseIdentity And Access ManagementInfrastructure-As-CodeCloud Security ExpertiseThreat Modeling Methodology

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringAI Tools ExperienceScripting Language ProficiencyApplication Security KnowledgeThreat ModelingPreventive Security ControlsPolicy-As-CodeAutomationVulnerability ScanningAI Agent Development

Tools & Technologies

TerraformOPA/RegoAWSSIEMCSPMSASTDASTLLM FrameworksChatGPTCopilot

Certifications & Qualifications

AWS Solutions ArchitectSecurity Specialty

Industry Keywords

SOC 2ISO 27001OWASP Top 10Adversarial InputsModel Supply ChainPrompt InjectionRAGData Handling BoundariesAI SystemsNon-Human Identities

Tech Stack

Tools & technologies

AWSCloudPythonSDLCTerraform

About the role

Key responsibilities & impact

Bridge architectural intent and operational reality by resolving conflicts between security requirements and feasible implementation
Propose compensating controls and help register, track, and remediate residual risks
Implement preventive, default-on security controls across cloud and enterprise environments
Codify security controls as policy-as-code and infrastructure-as-code, including controls governing AI tools and models
Implement and enforce identity and access controls, including boundaries for AI systems and non-human or agent identities
Maintain the InfoSec risk register and translate emerging threats into actionable engineering guidance
Support third-party and vendor risk assessments, especially for vendors processing data through AI pipelines
Automate evidence collection, access reviews, and alert enrichment
Build or operate AI-assisted security agents with human approval gates and least-privilege credentials
Integrate SIEM, CSPM, DAST/SAST, and vulnerability scanners with LLM layers
Define and enforce AI feature security requirements, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries
Conduct threat modelling for agentic and LLM-based systems
Collaborate with Platform Engineering, IT, Security Champions, and external auditors
Travel up to 10%

Requirements

What you’ll need

5+ years of security engineering experience with demonstrated AI/ML security depth, including prompt injection, model supply chain, adversarial inputs, and RAG
Experience using AI tools such as ChatGPT, Copilot, and Claude
Experience with LLM frameworks and APIs such as OpenAI, Anthropic, and LangChain
Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including AI systems and non-human identities
Infrastructure-as-code and policy-as-code experience, including Terraform and OPA/Rego
Proficiency in a scripting language for automation; Python preferred
Cloud security expertise, including AWS multi-account governance, preventive guardrails, and policy-as-code
AWS Solutions Architect / Security Specialty or equivalent demonstrated expertise
Application security knowledge, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC
Threat-modelling methodology knowledge, including STRIDE, PASTA, or equivalent
Practical experience building or operating AI agents
Experience integrating SIEM, CSPM, SAST/DAST/SCA tools to surface actionable insights
Working knowledge of SOC 2 and/or ISO 27001 control frameworks

Benefits

Comp & perks

Medical, dental and vision benefits with affordable health care plans and company HSA contributions, starting on Day 1
6% 401(k) match
20 days of Paid Time Off
9 Company-Paid holidays
2 paid floating holidays
7 paid sick days
2 Wellness days
1 Paid Volunteer Day
PTO increases to 22 days at 3 years of service and 25 days at 5 years
12 weeks primary caregiver leave
4 weeks secondary caregiver leave
Accident, critical illness, and hospital indemnity insurance
Pet insurance
Legal assistance and identity theft insurance plans
Life insurance at 2x salary
Calm app access
Employee Assistance Program
$65/month remote work stipend for internet
Culture and team-building activities
Tuition assistance
Career development opportunities
Charitable contribution match up to $250 per year
Discretionary bonus of 12% of annual base salary
Remote-first working conditions
Comprehensive benefits and wellness plans