C
Senior AI Security Engineer
HybridFull-timeSecurity EngineeringFinancial Services
Build the security and trust layer for enterprise AI across cloud platforms, protecting data, model integrity, and regulatory compliance.
Responsibilities
- Design AI guardrails across Azure and AWS, including filtering, PII redaction, validation, and policy enforcement
- Define secure usage and data governance patterns for agentic frameworks, coding agents, and MCP servers
- Threat model AI applications, agents, MCPs, RAG systems, and fine-tuning pipelines
- Build privacy-preserving monitoring, telemetry, safety dashboards, abuse detection, and SIEM integrations
- Integrate AI security into the SDLC through libraries, pre-commit checks, CI/CD gates, policy-as-code, and reference architectures
- Evaluate third-party AI vendors and internal applications for security, data residency, retention, identity, and control requirements
- Map AI controls to regulatory frameworks and maintain evidence for audits
- Lead or participate in AI red-teaming, safety benchmarking, and incident response playbook development
- Enable engineering teams through practical guidelines, examples, and training
Requirements
- 5+ years of experience in Security Engineering, AppSec, Cloud Security, or a similar field
- 1–2+ years securing AI/ML or data-intensive systems, preferably generative AI
- Hands-on experience with AWS and/or Azure, Python or TypeScript, REST/gRPC, containers/Kubernetes, and Terraform or similar IaC
- Understanding of LLM attack surfaces and mitigation patterns
- Experience assessing agentic architectures and AI coding assistants
- Familiarity with OAuth2/OIDC, service principals, role tokens, PIM, secret management, and KMS
- Experience implementing observability and telemetry and routing findings to SIEM
- Ability to convert security controls into libraries, documentation, and CI/CD checks
- Experience mapping controls to FFIEC, SOC 2, and PCI DSS
- Strong written communication in English and Hebrew
Nice to have
- Financial services or other high-assurance domain experience
- Exposure to Duende IdentityServer, SSO/SCIM, and enterprise authorization patterns
- Familiarity with Azure AI Safety features, Amazon Bedrock Guardrails, or OPA/Rego
- Experience with AI red-teaming or safety evaluation harnesses
- Open-source contributions or published talks
Benefits
- Flexible hybrid work model with three days per week in the Jerusalem office
- Monthly wellness reimbursement
- Keren Hishtalmut
- Private health and dental insurance
- Volunteer days and donation matching
- Yoga and Pilates
- Supportive, collaborative culture