Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Zip Co

Principal AI Security Engineer

Zip Co

. Lead the technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows at Zip .

Posted 11/6/2026full-timeRemote • United StatesLead💰 $203,000 - $254,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AI security architecture, including the design and implementation of scalable security controls for LLM applications and autonomous agents. Proficient in threat modeling, automation, and integrating security practices into engineering workflows.

Highest-signal resume keywords
Technical Leadership in Security EngineeringExperience with LLM Architectures and Agentic SystemsProficiency in Python or Modern Programming LanguagesFamiliarity with OWASP Top 10 and NIST AI RMFExperience with Cloud-Native Architectures and CI/CD Security

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security EngineeringAI Security TestingThreat ModelingAutomationSecurity Architecture DesignData ProtectionPrompt Injection ProtectionModel Security GatewaysReusable Engineering ComponentsSecurity Controls Implementation
Soft Skills
Technical LeadershipInfluencing Architecture DecisionsMentoring EngineersCollaboration Across TeamsBuilder's Mindset
Tools & Technologies
LangChainLangGraphSemantic KernelOpenAI APIsMicrosoft AzureGoogle Cloud PlatformTerraformKubernetesCI/CD PipelinesMCP Servers
Industry Keywords
Financial ServicesPaymentsRegulated EnvironmentsAI-Enabled Engineering WorkflowsAgentic AI Platforms

Tech Stack

Tools & technologies
AzureCloudGoogle Cloud PlatformKubernetesPythonTerraform

About the role

Key responsibilities & impact
  • Lead the technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows at Zip
  • Architect and build scalable security controls for LLM applications, RAG systems, and agentic AI platforms
  • Develop AI security testing, automation, and secure-by-default engineering practices
  • Define and implement security architecture for LLM applications, RAG, autonomous agents, and AI-powered products
  • Engineer protections against prompt injection, data exfiltration, insecure tool execution, excessive agency, and other AI-specific threats
  • Establish secure patterns for model access, NHI access, authorization, secrets management, and sensitive data protection
  • Design security boundaries for AI agents interacting with enterprise systems, APIs, databases, and cloud infrastructure
  • Establish secure-by-default patterns, harnesses, and guardrails for AI coding assistants, autonomous development agents, and AI-generated software
  • Secure MCP servers, agent tool integrations, and AI-enabled development workflows
  • Build reusable security components, APIs, and automation integrated into engineering platforms and CI/CD pipelines
  • Build automated security testing and evaluation capabilities for AI applications and agents
  • Develop AI red teaming, prompt injection testing, and security regression testing
  • Implement monitoring and detection for suspicious AI behavior, unauthorized tool execution, and sensitive data exposure
  • Perform post-incident response for agent misalignment and partner with the Agentic Platform team to prevent recurrence
  • Leverage AI to automate threat modeling, vulnerability analysis, and remediation
  • Establish Zip's technical direction and engineering standards for AI security
  • Partner with engineering teams to take secure AI solutions from architecture through production
  • Design risk-tiering logic aligned with Zip's 5-level AI automation classification
  • Co-own the security evaluation framework for new AI models and third-party tools
  • Evaluate emerging AI technologies and security capabilities, making pragmatic build-versus-buy decisions
  • Mentor engineers and influence technical decisions across security, platform engineering, and software development
  • Success includes scalable AI security architecture, reusable controls, integrated testing/monitoring/enforcement, reduced manual effort, and secure innovation

Requirements

What you’ll need
  • Demonstrated Staff or Principal-level technical leadership in security engineering, application security, or cloud security
  • Deep security engineering experience plus demonstrable hands-on work with LLM/agent systems
  • Intimate familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF
  • Strong understanding of LLM architectures, agentic systems, RAG, and modern AI development frameworks
  • Experience building AI security evaluations, red-teaming capabilities, model security gateways, and securing AI systems against prompt injection, data leakage, tool abuse, and unauthorized access
  • Strong software engineering skills, including proficiency in Python or another modern programming language
  • Experience with cloud-native architectures, APIs, containers, IAM, and modern software delivery practices
  • Ability to design and implement security controls, automation, and reusable engineering components
  • Experience threat modeling complex systems and translating security requirements into practical solutions
  • Strong technical leadership skills with the ability to influence architecture and engineering decisions across teams
  • A builder's mindset focused on automation, scalability, and secure-by-default engineering
  • Highly regarded: Experience with LangChain, LangGraph, Semantic Kernel, OpenAI APIs, Azure AI, Google Vertex AI, or similar technologies
  • Highly regarded: Experience securing MCP servers, autonomous coding agents, or agentic workflows
  • Highly regarded: Experience with Microsoft Azure, Google Cloud Platform (GCP), Terraform, Kubernetes, and CI/CD security
  • Highly regarded: Experience in financial services, payments, or other regulated environments
  • Visa sponsorship is not available for this position

Benefits

Comp & perks
  • Flexible working culture
  • Incentive programs
  • Unlimited PTO
  • Generous paid parental leave
  • Leading family support policies
  • Company-sponsored 401k match
  • Learning and wellness subscription stipend
  • Beautiful Union Square office with a casual dress code
  • Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices available
  • Bonus and/or commission awards may be included in total compensation
  • Visa sponsorship is not available for this position