AI Security Engineer (AI & Agentic Security)
Strategic Systems International2 months ago
Mexico (city not specified)Senior
Responsibilities
- Support the enterprise AI security program across chatbots, code assistants, agentic workflows, and AI platforms with tool access.
- Translate specific and testable security policies into automated enforcement using policy-as-code, CI/CD gates, gateway-level controls, and DLP rules.
- Assess new AI tools, protocols, and frameworks by analyzing their architecture, trust boundaries, authentication models, and security risks.
- Evaluate and address prompt injection, jailbreaking, unsafe outputs, tool-use abuse, data leakage, identity misuse, and agentic workflow escalation.
- Develop technical security requirements and written risk assessments for vendor capability gaps and newly adopted tools.
- Apply cloud security, identity and access management, AI security frameworks, and regulated-industry compliance controls to enterprise AI deployments.
- Support discovery and governance of shadow AI, BYOAI, autonomous agents, browser extensions, and personal AI accounts used for work.
- Contribute to AI red teaming, detection engineering, SIEM integration, and telemetry design for AI and agent behavior.
Requirements
- At least 5 years of strong software engineering experience and proficiency in Python or an equivalent language.
- At least 3 years of experience in AI/ML or GenAI security, or equivalent hands-on information security experience with a demonstrated transition into AI security.
- Demonstrated ability to write specific, testable security policies and implement them through automated controls rather than voluntary compliance.
- Working knowledge of AI and LLM security risks, including prompt injection, jailbreaking, unsafe outputs, tool-use abuse, identity misuse, and agentic workflow escalation.
- Hands-on familiarity with NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10, and OWASP Agentic Top 10.
- Cloud security experience across at least two of AWS, GCP, and Azure, including native AI/ML security tooling.
- Knowledge of IAM fundamentals including OAuth 2.0, OAuth 2.1, OIDC, and mTLS; exposure to SPIFFE/SPIRE and agent identity models is useful.
- Experience in healthcare, financial services, or another highly regulated industry with HIPAA or equivalent compliance obligations.
- Strong technical writing skills for converting vendor gaps and tool risk profiles into implementable and testable controls.
- Preferred experience with MCP, A2A, Kong AI Gateway, Azure APIM GenAI Gateway, Apigee, AI-native runtime security platforms, content guardrails, shadow-AI governance, CrowdStrike Falcon, Wiz, CASB, PyRIT, Promptfoo, AgentDojo, custom AI red-team harnesses, Microsoft Purview DSPM for AI, detection engineering, SIEM integration, and AI behavior telemetry.
- Relevant CAISP or ISACA AAISM certification, or equivalent demonstrated skill, is preferred.
Tech Stack
Categories
About Strategic Systems International
Strategic Systems International (SSI) provides advanced analytics and software engineering services, building data-driven applications for tech companies and enterprises. Founded in 1991 and headquartered in Chicago, it operates globally with offices in Europe, Asia, and Latin America. SSI is a Microsoft Gold Certified Partner, delivering custom development, data engineering, business intelligence, and machine learning across sectors such as fintech, healthcare, IoT, and big data.