Norm Ai
AI Security Engineer, Defensive Automation
Washington D.C., Remote. Posted 12 days ago
The role
Senior AI Security Engineers will build automated, AI-driven systems to find, prioritize, and fix security weaknesses. You will work across the full lifecycle from discovery and threat modeling through remediation and response.
What you will do
- Design, build, and improve AI-driven security tooling
- Assess new and existing systems for risk using threat models
- Join the response rotation for critical vulnerabilities and security events
- Track security work performance and explain risks to audiences
- Proactively hunt for unknown weaknesses using automated and manual techniques
- Confirm and reproduce findings to improve automation
- Triage, prioritize, and remediate vulnerabilities at scale
- Integrate threat intelligence and external advisories into remediation priorities
Required qualifications
- 5+ years of experience in application security and cloud security fundamentals
- Strong software engineering skills, with production code in at least one modern language (ideally Python)
- Hands-on experience building with LLMs or AI agents
- Experience running threat models
- Calm, structured judgment during incidents
- Deep expertise in at least one area: Vulnerability research, offensive security or red teaming, exploit development, CVE credits, or bug bounty work
- Deep expertise in at least one area: Vulnerability management at scale, detection and response, security automation, or software supply-chain security
Nice to have
- Threat intelligence experience
- Experience in highly regulated industries
- Experience securing multi-tenant SaaS
Benefits
- 401(k) with employer match
- health, dental, vision coverage
- unlimited paid time off
- free lunch in office daily
- employee referral bonus program
- Financial support to ease your move to New York City
About the company
Norm builds AI-native professional services firms and the technology that powers them. Their legal and compliance platform serves institutions representing more than $35 trillion in combined assets under management.