AI Security Engineer

Minimum Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent experience.
• 5 or more years of security engineering, security operations, or cloud security experience in an enterprise environment.
• Hands-on experience with CASB, SIEM, and data loss prevention tools, including app discovery, policies, and alerts.
• Experience writing detection and hunting queries, and scripting (for example, Python or PowerShell) for automation, log analysis, and API integrations.
• Working knowledge of identity and access management, including OAuth consent, application permissions, and service accounts.
• Understanding of AI security risks such as data leakage, prompt injection, over-permissioned agents and connectors, and shadow AI.
• Strong written communication skills, including documenting risks, controls, and runbooks for varied audiences.
• Ability to work independently and collaboratively in a remote, cross-functional environment.

Preferred Qualifications

• Experience with Microsoft security tools such as Microsoft Defender and Microsoft Purview.
• Experience securing AI agents and integrations, such as MCP servers, connectors, or AI APIs.
• Familiarity with admin, audit, and compliance features of Microsoft 365 Copilot, ChatGPT EDU, or Box AI.
• Familiarity with AI risk frameworks such as the NIST AI RMF or the OWASP Top 10 for LLM Applications.
• Security certifications such as CISSP, CCSP, or vendor security certifications.
• Familiarity with higher education or the University of California, including UC IS-3 and the Electronic Communications Policy.