Principal AI Security Engineer
Zip Co Limited5 days ago
Remote, United StatesStaff+
Base Salary
$203k - $254k/yr
Responsibilities
- Lead technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows.
- Architect and implement security controls for LLM applications, RAG systems, agentic platforms, enterprise integrations, APIs, databases, and cloud infrastructure.
- Develop protections against prompt injection, data exfiltration, insecure tool execution, excessive agency, unauthorized access, and sensitive-data exposure.
- Build secure-by-default patterns, AI coding-assistant guardrails, MCP server protections, reusable security components, APIs, automation, and CI/CD integrations.
- Build automated AI security testing, evaluation, red-teaming, prompt-injection testing, security regression testing, monitoring, and detection capabilities.
- Establish AI security architecture, standards, risk-tiering logic, and evaluation frameworks for models and third-party tools.
- Partner with engineering and platform teams to take secure AI solutions from architecture through production.
- Mentor engineers and influence technical decisions across security, platform engineering, and software development.
Requirements
- Staff- or Principal-level technical leadership in security engineering, application security, or cloud security.
- Deep security engineering experience and hands-on experience with LLM or agent systems in production, open source, internal platforms, or published research.
- Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
- Strong understanding of LLM architectures, agentic systems, RAG, and modern AI development frameworks.
- Experience building AI security evaluations, red-teaming capabilities, model security gateways, and protections against prompt injection, data leakage, tool abuse, and unauthorized access.
- Strong software engineering skills, including proficiency in Python or another modern programming language.
- Experience with cloud-native architectures, APIs, containers, IAM, and modern software delivery practices.
- Experience designing security controls, automation, reusable engineering components, and threat models for complex systems.
- Strong technical leadership and ability to influence architecture and engineering decisions across teams.
- Highly regarded experience with LangChain, LangGraph, Semantic Kernel, OpenAI APIs, Azure AI, Google Vertex AI, Microsoft Azure, Google Cloud Platform, Terraform, Kubernetes, CI/CD security, MCP servers, autonomous coding agents, agentic workflows, or regulated industries.
Benefits
- Remote-first work arrangement for US-based employees with an option to work from the Manhattan office.
- Flexible working culture, incentive programs, unlimited PTO, generous paid parental leave, and family support policies.
- Company-sponsored 401k match, learning and wellness subscription stipend, and employer-sponsored insurance with covered choices.
- Casual-dress Union Square office.
- Visa sponsorship is not available for this position.
Categories
About Zip Co Limited
Zip Co Limited (ASX: ZIP) provides buy now, pay later and point-of-sale credit products for consumers, integrated into online and in-store checkouts. It earns primarily from merchant fees, interchange, and consumer charges on longer-term credit; products include Zip Pay and Zip Money. Founded in 2013 and headquartered in Sydney, it operates in Australia, New Zealand, and the United States with a broad merchant acceptance network.