Ai Security Engineer Jobs

We are seeking a highly technical Security Engineer to join our Product Security team. This role is integral to ensuring the security and integrity of our products and services. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy. Your expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and terraform orchestration will be crucial in identifying and mitigating potential security vulnerabilities. You will also structure complex problems, diagnose root causes independently, and clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. You will: Leverage broad product security expertise to build and maintain software tooling that secures every layer of the modern AI/ML software ecosystem. Conduct in-depth code reviews to identify and remediate security vulnerabilities. Evaluate and enhance the security of our product offerings, through RFC and service review. Implement and maintain CI/CD pipelines with a strong focus on security. Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code. Utilize terraform orchestration to ensure secure and efficient infrastructure management. Guide engineering teams to build robust long-term solutions that consider security and privacy. Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. Influence the security strategy and direction of the team, advocating for best practices and continuous improvement. Ideally, you’d have: Demonstrated ability to drive multi-month security initiatives independently, from problem definition through execution, without requiring significant direction. Proven experience as a Security Engineer with a focus on product security. Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes

About Snorkel Snorkel AI is the frontier AI data lab, helping teams build the data and environments behind high-performing frontier and agentic AI. We combine technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions for real-world AI systems. Founded out of the Stanford AI Lab in 2019, Snorkel works with leading AI labs and enterprises to move from better data to better outcomes. Excited to help us redefine how AI is built? Apply to be the newest Snorkeler! About the Role We are seeking a Security Engineer to evolve Snorkel's security posture across our cloud infrastructure, developer platform, and product ecosystem. You will partner with the security lead to secure cloud environments, build security automation, guide cross-functional initiatives, and embed security into our engineering workflows. You will work across infrastructure, platform, product, and application teams to ensure our systems scale securely and meet the bar required for modern, cloud-native, compliance-focused environments. This is a high-impact role where your ability to work effectively with others matters as much as your technical depth. Key Responsibilities Build and scale Infrastructure as Code (IaC) governance strategies that embed security while enabling developer velocity Operate and tune Cloud Security Posture Management (CSPM) tooling and coordinate remediation through engineering teams Investigate security events , triage incidents, identify root causes, and own remediation through resolution Architect secure AWS cloud account structures — landing zones, multi-account patterns, network segmentation, and cross-account role strategies Design and implement network security architectures using security groups, Network Access Control Lists (NACLs), subnetting, routing layers, and egress controls Establish secure-by-default design patterns across Kubernetes and containerized workloads Design, maintain, and govern Identity and Acces

We are seeking a highly skilled Infrastructure Security Engineer to join our team. This role is integral to ensuring the security and integrity of our platform. You will be responsible for securing large cloud environments, orchestrating and securing various compute clusters, and reviewing infrastructure as code. Your expertise in cloud security, infrastructure automation, and advanced security practices will be essential in maintaining and enhancing our security posture. You will: Secure infrastructure across large cloud hosting providers (e.g., AWS, Azure, GCP). Implement and maintain robust security configurations and policies for cloud environments. Conduct regular security assessments and audits of infrastructure to identify vulnerabilities and areas for improvement. Develop and enforce security best practices for infrastructure automation and orchestration. Collaborate with DeveloperExperience, IT, and product teams to integrate security into all stages of the infrastructure lifecycle. Review and secure infrastructure as code (e.g., Terraform, CloudFormation). Educate and mentor team members on infrastructure security best practices and emerging threats. Ideally, you’d have: Proven experience as a Security Engineer with a focus on product security. Proficiency in NodeJS, TypeScript, and Kubernetes. Experience with orchestrating and securing GPU clusters. Proficiency in infrastructure as code tools such as Terraform and CloudFormation. Excellent communication skills, with the ability to clearly explain technical concepts and their implications to both technical and non-technical stakeholders. Demonstrated ability to influence security strategies and drive improvements within an organization. Relevant security certifications (e.g., AWS Certified Security Specialty, Certified Cloud Security Professional) are a plus. Experience in a senior or lead security role is preferred. Compensation packages at Scale for eligible roles include base salary, equit

CAPCO POLAND *We are looking for candidates willing to relocate to the Middle East - Qatar for the duration of the project. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management. Our secret? A culture that’s fast, flexible, and fiercely entrepreneurial. We move quickly, think creatively, and always put our people first. We’re passionate about growth - both for our clients and ourselves - and that means attracting the very best talent to join us on this exciting journey. We’re proud to be: • Trailblazers in banking, payments, capital markets, wealth, and asset management • Champions of an agile, nimble, and innovative work environment • Dedicated to building a team of top-notch professionals who share our drive and vision The Role Capco is looking for an AI Security Consultant to help our clients identify, assess, and manage security risks associated with AI technologies and AI-enabled solutions. You’ll work across data, security, technology, risk, and business teams to embed appropriate security controls throughout the lifecycle of AI systems. This is an opportunity to work at the intersection of AI, data, and cybersecurity within financial services, helping clients adopt AI securely while protecting sensitive information, strengthening governance, and managing emerging security risks. The engagement is expected to run for one year and requires relocation to the Middle East for its duration . You will collaborate with client and project teams to deliver the agreed data engineering scope and project outcomes. What You’ll Do Assess security risks associated with AI systems, models, data pipelines, and supporting technology environments. Conduct AI security assessments and secure AI architectu

WHO WE ARE Edmentum is a dynamic educator and student-focused company dedicated to tech-enabled learning solutions. Our goal is to ensure that all students have access to flexible learning environments and educators have the tools they need to support their students. We are on a mission to create innovative, proven learning technology, partnering with educators to ignite student potential. We are a Remote First organization with a strong commitment to excellence, innovation, and customer satisfaction. What You'll Do At Edmentum, security is the foundation that keeps student data, educator tools, and the platforms behind learning for millions of students safe. As an Information Security Engineer, you'll get hands-on with the systems and practices that protect them. You'll work alongside talented Technology teams to strengthen our security posture, sharpen your skills across security operations and compliance, and help bring new tools, including AI, into how we defend Edmentum. In this role you will: Monitor production systems for security events, take part in incident response, and help keep Edmentum's data and infrastructure secure and available. Run vulnerability assessments, drive remediation, and apply proven risk frameworks to close security gaps. Support compliance with FERPA, COPPA, GDPR, NIST, and SOC 2, helping keep Edmentum audit-ready. Evaluate and administer security tools, and explore emerging technologies, including AI, to strengthen our defenses. Partner with development, systems, and network teams to build security into how we build and operate. Improve change management, configuration management, and security metrics, and help find root causes after incidents. Who You Are You have 3 to 5 years of experience supporting and securing enterprise IT infrastructure, ideally in a SaaS environment. You have a bachelor's degree in a technology-related field or equivalent hands-on experience. You have a solid grasp of core security principles and experience se

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role: You will act as the designated security focus on a specific product domain, driving threat modeling, security assessments, and vulnerability management across Bloomreach's platform. Your Job Will Be: Support the implementation and adoption of Secure Software Development Lifecycle ( SSDLC ) practices across engineering teams, helping integrate security throughout the product development process. Perform security reviews of application designs , system architectures , and i nfrastructure components , with guidance as needed, to identify security risks and recommend appropriate mitigations. Participate in threat modeling exercises for new and existing products, helping identify threats, assess risk, and document practical security recommendations. Provide security guidance to product and engin

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments Integrate security into our applications throughout the software development lifecycle Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions Gather and analyze security metrics to address security issues with cross-team dependencies Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions You may be a good fit if: 5

About BlueConic: We are building products with AI at the core, and we build our products using AI. Agents and skills write a share of our code, run parts of our SDLC, and operate alongside our engineers every day. We need a Staff Security Engineer who can secure that reality, not the SDLC of five years ago. In conjunction with the CISO you represent security across the product development lifecycle, lead threat modeling and vulnerability management, and drive secure coding practices in an environment where code review means reviewing agent output as often as human output. You will use AI agents and skills as core tools of your own job: building automation, running threat models, triaging vulnerabilities, and scaling your impact across teams. Lead Security Engineer What you'll do Drive adoption of secure coding practices, including practices specific to AI-generated and AI-assisted code. Conduct security assessments, threat modeling, and risk analysis so threats are understood, documented, and mitigated. Automate security processes wherever it creates leverage, using scripts, AI agents, and AI skills as your default tools. Identify emerging classes of vulnerabilities and build solutions before they become incidents. Build and maintain security tooling, automation, and monitoring capabilities, including custom agents and skills for security workflows Threat model agentic systems: prompt injection, tool misuse, unauthorized agent privilege escalation, and data exfiltration through agent actions. Define guardrails and human-in-the-loop checkpoints for agent-driven changes to code and infrastructure. Set and enforce review standards for code produced by AI coding agents, including required checks before agent-authored changes reach production. Break large, cross-team security projects into individual tasks. Manage scope across teams and drive projects to closure. Monitor, investigate, and respond to security incidents, coordinating remediation across teams. S

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Austin (US), London (UK) Role Summary As a Product Security Engineer, you will support security assessments and vulnerability operations for Cloudflare’s core software products. In this role, you will analyze system architecture, threat model new features, and ensure that product-related security findings are accurately triaged, routed to the correct engineering owners, and mitigated within our SLAs. On any given day, you migh

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Appian’s Information Security team operates at the heart of our Enterprise-Grade Orchestration ecosystem. We continuously evaluate the evolving cyber threat landscape, assess security risks, and enforce modern security frameworks. Our team ensures that Appian's cloud offerings and internal operations remain robust, compliant, and resilient so our global customers can innovate with total confidence. As an Information Security Intern at Appian, you won't just sit on the sidelines—you will actively contribute to live security operations, modern cloud architecture defense, and compliance automation. Working directly alongside industry experts at our vibrant McLean headquarters, you will gain hands-on exposure to cutting-edge cloud infrastructure, automated governance, and enterprise threat analysis, setting a solid foundation for a high-impact cybersecurity career. This internship is based at our headquarters in McLean, Virginia. Appian was built on a culture of in-person collaboration, which we believe is a key driver of our mission to be the best. Interns in this program are expected to be in the office 5 days a week to fully experience our culture, learn directly from peers and mentors, and contribute to projects in a collaborative environment. Being in the office provides more opportunities to connect, learn, and celebrate with the exceptional people across Appian. Applicants considered for Summer 2027 - Students Only What You’ll Do Execute continuous monitoring activities to ensure continuous alignment with internal security controls, industry regu

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role As a Principal Security Engineer focused on Software Security Engineering at Block, you will be a technical leader reporting to the CISO responsible for setting the bar for security excellence and driving the creation of innovative, world-class software solutions to complex security problems. You will work across Engineering and Information Security (InfoSec) to champion a "Secure by Design" culture, directly influencing the architecture of Block's core products and infrastructure. Your mandate is to provide deep technical expertise and strategic direction to ensure that security is enabling fast, secure innovation across the business. You Will Software Security Innovation : Deliver world-class and innovative software solutions to security problems, tackling Block's top risks such as technology fragmentation and security after-the-fact. Technical Strategy & Architecture : Define the multi-year technical strategy for software security at Block, guiding architectural decisions and ensuring alignment with engineering best practices. Cross-Cutting Solution Leadership : Identify and lead the development and implementation of common, high-leverage security solutions and infrastructure across Block's business units (Square, Cash App, TBD, etc.) to combat data sprawl and overpermissioning. Drive engineering excellence , specifically

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey – from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk for one single system that is designed to meet the needs of modern day support teams. Founded in 2011, Fin became one of the fastest growing companies and remains one of the largest private software companies in the world with nearly 30,000 global businesses using our products to transform their customer support. Driven by our core values, we push boundaries, build with speed and intensity, and relentlessly deliver incredible value to our customers. What's the opportunity? Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering teams to make secure development the default. We're engineers first; designing, building, and operating systems that protect Fin and its customers. The team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities. The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how products are designed, developed, and delivered. As Fin continues to expand its capabilities and adoption, you'll help shape how security evolves alongside some of the

Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey – from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk for one single system that is designed to meet the needs of modern day support teams. Founded in 2011, Fin became one of the fastest growing companies and remains one of the largest private software companies in the world with nearly 30,000 global businesses using our products to transform their customer support. Driven by our core values, we push boundaries, build with speed and intensity, and relentlessly deliver incredible value to our customers. What's the opportunity? Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering teams to make secure development the default. We're engineers first; designing, building, and operating systems that protect Fin and its customers. The team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities. The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how products are designed, developed, and delivered. As Fin continues to expand its capabilities and adoption, you'll help shape how security evolves alongside some of the

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges. Your team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries — both external and internal — to compromise our global network.

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. About the Role Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers. You may be a fit if You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1. You're comfortable tracing an external claim back to how the product and infrastructure are actually configured — you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome. You have strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators. Sample projects include Automate evidence gathering and continuous control testing. Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust i