AI Security engineering

AI Security engineering

Job Description
We are looking for an experienced AI Security Engineer / LLM Security Engineer with 5+ years of experience in security engineering, detection engineering, SOC operations, or related domains, along with strong hands-on experience building production-grade LLM applications.
The ideal candidate will have a strong combination of cybersecurity expertise and AI/LLM engineering skills, with experience designing agentic workflows, security automation, evaluation frameworks, and integrations with SIEM/EDR platforms.

Key Responsibilities

-Design and build multi-agent LLM workflows for security alert triage, enrichment, investigation, and response.
-Develop agent state management, tool routing, structured outputs, and inter-agent handoffs.
-Build evaluation pipelines using golden datasets, regression suites, LLM-as-a-judge, and human review processes.
-Engineer prompts, tool interfaces, and structured outputs while optimizing model capability, latency, and cost.
-Implement LLM observability, including tracing, token usage monitoring, performance analysis, and failure analysis.
-Evaluate and integrate commercial and open-weight LLMs for security-sensitive and latency-sensitive workloads.
-Encode SOC investigation methodologies, including triage criteria, investigation pivots, evidence standards, and escalation thresholds.
-Implement security controls for AI agents, including prompt-injection protection, untrusted evidence handling, read-only defaults, approval gates, -and fail-safe escalation.
-Develop integrations with SIEM and EDR platforms and build programmatic security query interfaces.
-Create and maintain detection-as-code pipelines and security detection content.
-Author and convert detection rules across different formats and query languages.
-Ensure strict data isolation and segregation across customer environments.
-Collaborate with security, software engineering, and AI teams to deliver reliable production-grade security automation.

Required Skills & Experience

-5+ years of professional experience in security engineering, detection engineering, SOC operations, incident response, or a related cybersecurity role.
-Hands-on experience handling real-world security incidents.
-Production experience building LLM applications and AI agents.
-Experience with agent frameworks such as LangGraph or comparable frameworks.
-Strong knowledge of prompt engineering, tool calling, structured outputs, and LLM evaluation.
-Strong Python programming skills.
-Experience with modern asynchronous web frameworks and production API development.
-Working knowledge of MITRE ATT&CK.
-Strong working knowledge of at least one SIEM query language such as KQL, SPL, CQL, or equivalent.
-Understanding of LLM security risks including prompt injection, data poisoning, tool abuse, and untrusted inputs.
-Strong understanding of security automation and SOC investigation workflows.