AI Information Security Engineer

The role

You will shape and mature the approach to securing AI within products and across the enterprise. You will design security controls, lead assessments, and build tooling to strengthen cybersecurity posture.

What you will do

• Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle.
• Implement security guardrails and controls for LLMs, SLMs, and open-source models.
• Monitor the AI landscape for novel vulnerabilities and attack techniques.
• Develop security reference architectures for AI deployment patterns.
• Deploy controls to ensure model integrity, governance, and access control.
• Build AI-driven tooling to strengthen cybersecurity posture.
• Perform AI safety, security assessments, and threat modeling.
• Collaborate with software engineers and product teams to integrate security best practices.
• Create security guidance, documentation, and training for internal teams.
• Research emerging trends in AI security.

Required qualifications

• 2 or more years of professional experience in information security or application security.
• Demonstrated interest in securing AI/ML systems.
• Awareness of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks.
• Knowledge of data security principles, including encryption, masking, and tokenization.
• Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling.
• Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices.
• Ability to work cross-functionally across engineering, product, and business teams.
• Strong written and verbal communication skills.
• Strong problem-solving skills.
• Attention to detail.
• Ability to lead projects with end-to-end ownership.
• Self-motivated and effective working independently and across distributed teams.

Nice to have

• Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments.
• Basic coding experience in Python and/or Go.
• Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar.
• Strong understanding of the ML/AI lifecycle and the security risks associated with each stage.
• Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc.).
• Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services.
• Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications.

Benefits

• medical, dental, vision, disability and life insurance
• 401(k) retirement savings with company match
• employee stock purchase plan
• employee referral program
• flexible spending accounts
• Employee Assistance Program (EAP)
• education assistance
• parental leave
• paid time off (PTO)
• company-paid holidays
• health and wellness events
• community programs

About the company

Tenable is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk.