9 hours ago
Remote, WorldwideMid Level
Responsibilities
- Assess customer data shared with third-party model vendors, including minimization, retention, logging, vendor controls, and approved use.
- Design least-privilege controls for AI agent permissions, tools, actions, and system access.
- Implement and test tenant and user data isolation across prompts, conversation history, retrieval, memory, and connected services.
- Threat model and test prompt injection and indirect injection through documents, retrieved content, links, and other untrusted inputs.
- Partner with Product and Engineering on document ingestion, content handling, output validation, and approval of sensitive actions.
- Support SC TRM and BNM RMiT AI technology-risk controls, assessments, third-party oversight, evidence, and remediation.
- Build security tests, monitoring, and response procedures for AI misuse, data exposure, unauthorized actions, and vendor incidents.
Requirements
- Degree in Computer Science, Cybersecurity, AI, or a related field, or equivalent experience.
- At least 3 years of experience in application security, product security, security engineering, or AI system security.
- Experience implementing or owning SC TRM and BNM RMiT controls, technology risk, or regulatory control evidence.
- Understanding of third-party LLM integrations, model APIs, agent tools, RAG, and AI application architectures.
- Knowledge of prompt injection, indirect injection, cross-user data leakage, excessive agent permissions, and vendor data-disclosure risks.
- Programming or scripting skills, preferably Python and TypeScript/Node.js, plus APIs and AWS or GCP.
- Strong English communication and ability to collaborate with Product, Legal, Compliance, Data, and Engineering.
Categories
About Bjak
Bjak builds an online insurance marketplace for consumers in Malaysia and Southeast Asia, enabling comparison and purchase of car, health, life, and travel policies. Its business model is aggregator-based, earning commissions and fees from insurers and partners while streamlining digital applications and renewals. Founded in 2019 and headquartered in Selangor, it is privately held and is expanding from insurance comparison into broader fintech services via a planned finance super app.