1 day ago
Remote, AmericasMid Level
H1B sponsor
Responsibilities
- Define authentication, authorization, access, attribution, and audit controls for AI agents, bots, and automations.
- Own security requirements for AI tool integrations, including least-privilege access, credential handling, data handling, secrets, and integration reviews.
- Design and implement guardrails for AI applications and agents.
- Review AI applications and integrations for security risks and provide practical security requirements to builders.
- Assist Security Operations with AI-powered tooling for detection, investigation, and response.
- Define security logging and telemetry requirements for AI systems and support detection development.
- Maintain visibility into AI tool usage and verify compliance with approved configurations.
- Lead AI-specific aspects of security incidents, including agent misuse and data exposure through AI tools.
- Translate AI security standards into technical controls and partner with GRC on governance and control evidence.
- Participate in the Security Operations on-call rotation after onboarding and cross-training.
Requirements
- At least 2 years of experience in security engineering, application security, or cloud security roles.
- Hands-on experience securing LLM applications, AI agents, or AI developer tools.
- Understanding of AI-specific risks including prompt injection, data leakage, excessive agency, and insecure tool use such as the OWASP Top 10 for LLM Applications.
- Experience with identity and access controls for services and non-human identities, including OAuth, service accounts, and secrets management.
- Programming experience in Python or another general-purpose language.
- Experience with cloud-native deployments, security operations or incident response, AI-assisted security workflows, and security telemetry for AI systems.
- Strong written and verbal communication skills and the ability to explain risk to non-security builders.
- Ability to work cross-functionally, make pragmatic security decisions, and participate in an on-call rotation.
- Preferred experience securing financial, trading, or other highly regulated platforms; enterprise AI coding tools and integrations; policy-as-code; Kubernetes; and AI governance frameworks such as the NIST AI Risk Management Framework or ISO 42001.
Benefits
- Competitive salary and stock options.
- Health benefits.
- One-time USD $500 new-hire home-office setup benefit.
- USD $150 monthly stipend via a Brex Card.
- 100% distributed and remote Security team.
Tech Stack
Categories
About Alpaca
Alpaca builds brokerage infrastructure APIs and operates a self-clearing broker-dealer, enabling fintechs, institutions, and developers to embed trading in stocks, ETFs, options, crypto, and fixed income. Its platform includes account opening, clearing, custody, and compliance tooling, with revenue from brokerage and platform fees. Founded in 2017 and headquartered in San Mateo, California, Alpaca serves clients in 40+ countries through its subsidiaries.