4 months ago
USA (city not specified)Senior
Base Salary
$130k - $195k/yr
Responsibilities
- Conduct hands-on AI security reviews and threat modeling using STRIDE, MITRE ATLAS, NIST AI RMF, and related frameworks.
- Propose and implement safeguards for software products, tools, and infrastructure before production release.
- Evaluate, build, configure, and modernize AI security tooling, scanning, automation, and agentic workflows.
- Harden AI systems and use AI to enhance security capabilities.
- Respond to customer AI security inquiries and support audit preparation and audit activities.
- Deliver reports and recommendations to technical and non-technical stakeholders.
- Lead cross-functional engagements and manage stakeholder relationships across distributed teams.
- Track AI security developments and share engineering and security practices across internal teams.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent experience.
- At least 5 years of commercial software and/or security engineering experience.
- At least 2 years conducting product security reviews and threat modeling with frameworks such as MITRE ATT&CK, MITRE ATLAS, NIST AI RMF, or STRIDE.
- At least 3 years of hands-on experience with cloud platforms, preferably Azure; AWS or GCP are acceptable.
- Demonstrated ability to deliver large-scale, cross-functional projects and work effectively with geographically distributed teams.
- Strong written and verbal communication, analytical, problem-solving, ownership, and AI security advocacy skills.
- Preferred: master’s degree or equivalent experience, legal or e-discovery domain experience, global SaaS experience, and familiarity with litigation workflows.
- Preferred: experience with Copilot, ChatGPT, Gemini, AI-specific attack vectors, and designing or operating AI-based security capabilities.
- Preferred: proficiency in C#, Python, or Java; relevant certifications such as Microsoft Certified: Azure Security Engineer Associate (AZ-500).
- Required skills include access management, application security, endpoint security, network security, penetration testing, security architecture design, security information and event management, security operations, and vulnerability management.
Benefits
- Competitive base salary, annual performance bonus, long-term incentives, and equity program.
- Benefits include DTO and parental leave.
- Hybrid work arrangement.
- Opportunity to work on distributed, cloud-native systems and AI technologies in legal technology.
- Collaborative, inclusive culture focused on knowledge sharing, growth, and end-to-end ownership.