Security Engineer

• Deploy and operationalize Microsoft Defender for Cloud Apps (CASB)
• Configure app discovery, shadow IT reporting, session controls, and data upload blocking for unsanctioned AI platforms
• Build and maintain DLP policies for AI platform data submission
• Define sensitive data patterns including PAN, IBAN, account numbers, and customer identity fields
• Enforce blocking rules across CASB, Microsoft Purview, and endpoint DLP
• Write SIEM detection rules for AI-related data leakage
• Detect bulk Snowflake exports followed by AI platform uploads and anomalous SaaS upload volumes
• Own technical onboarding of approved enterprise AI tools, including zero data retention, no model training on Reap data, audit logging, and Okta SSO integration
• Maintain the shadow AI inventory and classify tools against the company risk framework
• Report the shadow AI inventory monthly to the CISO
• Own prompt injection detection and prevention for AI-integrated products and internal tools
• Assess AI vendor security posture, including data retention, subprocessors, DPA coverage, and data handling
• Build and own the AI data leakage incident response playbook
• Partner with Engineering, Risk, and Operations to support secure global financial connectivity

Explore AI Security Engineer at Reap. Review requirements and application details.