Senior Security Engineer, AI Security

Simpson Thacher & Bartlett LLP

. Lead the implementation, maturation, and continuous improvement of the enterprise AI Security Program .

Posted 9/28/2026full-timeNew York City • New York • United StatesSenior💰 $180,000 - $215,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AI security principles, frameworks, and best practices, with a strong focus on securing AI platforms and applications. Capable of developing security automation and governance processes while fostering collaboration across teams and stakeholders.

Highest-signal resume keywords

AI Security EngineeringAI Platform SecuritySecurity AutomationIdentity and Access ManagementAI Threat Mitigation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringApplication SecurityCloud SecurityAI Security PrinciplesSecure SDLCAPI SecurityRBAC ImplementationPolicy-as-CodeGovernance AutomationData Protection

Soft Skills

CollaborationJudgmentPrioritizationRelationship Building

Tools & Technologies

ClaudeMicrosoft CopilotAI Coding AssistantsAI AgentsMCP Integrations

Certifications & Qualifications

CISSPCCSPCISM

Industry Keywords

OWASP Top 10NIST AI Risk Management FrameworkMITRE ATLASAdversarial AI RisksData PoisoningModel ManipulationSensitive Data ExposureDevSecOps Best Practices

Tech Stack

Tools & technologies

CloudCyber SecuritySDLC

About the role

Key responsibilities & impact

Lead the implementation, maturation, and continuous improvement of the enterprise AI Security Program
Develop and operationalize AI security standards, control frameworks, secure design patterns, implementation baselines, and governance processes
Serve as lead security engineer for enterprise AI platforms, including Claude, AI coding assistants, AI gateways, Agents, MCP-based integrations, and emerging AI technologies
Design, implement, and improve security controls covering identity and access management, authorization, tenant security, encryption, logging, monitoring, and data protection
Develop and operationalize AI guardrails against prompt injection, jailbreaks, unauthorized access, excessive agency, sensitive data exposure, model misuse, and adversarial attacks
Develop security automation, governance automation, and policy-as-code capabilities
Contribute to security architecture reviews and threat modeling for AI-enabled applications, platforms, agents, workflows, and integrations
Establish secure development standards for AI-enabled software development
Support security operations teams in monitoring and responding to AI security threats and emerging adversarial techniques
Partner with Data Protection, Privacy, Compliance, and Governance teams on safeguards for secure data use within AI platforms
Serve as the firm’s subject matter expert on AI security, emerging threats, adversarial AI risks, and industry best practices
Provide technical security engineering leadership for AI security innovation, proofs of concept, and future-state capabilities
Define and report KPIs measuring security effectiveness and maturity
Stay current on emerging threats, technologies, and industry trends
Build cross-functional partnerships across global teams and external stakeholders

Requirements

What you’ll need

Bachelor’s degree in information security, IT, related discipline, or equivalent experience
10+ years of experience in security engineering, application security, cloud security, or a related cybersecurity discipline
3+ years of hands-on experience securing AI platforms, AI-enabled applications, or enterprise AI solutions
Deep knowledge of AI security principles and frameworks, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), MITRE ATLAS, secure AI development practices, and AI governance principles
Strong understanding of AI threats including prompt injection, jailbreaks, data poisoning, model manipulation, excessive agency, MCP vulnerabilities, and sensitive data exposure
Experience securing enterprise AI platforms such as Claude, Microsoft Copilot, AI coding assistants, AI agents, or similar technologies
Experience implementing identity, authentication, authorization, RBAC, API security, and privileged access controls for AI platforms
Experience building security automation, policy-as-code, and governance automation to support AI security operations at scale
Knowledge of Secure SDLC, OWASP Top 10, API Security, software supply chain security, container security, and DevSecOps best practices
Demonstrated ability to build developer-friendly security controls that balance risk management with engineering productivity
Ability to manage multiple concurrent objectives and activities and make effective judgments in prioritizing and time allocation
Must be able to build collaborative relationships and interact frequently with leadership and internal/external stakeholders
Professional certifications such as CISSP, CCSP, CISM, or similar preferred
Must not require employer sponsorship for a work visa