AI Information Security Engineer

Glocomms is partnering with a leading fintech organization that develops technology platforms used by financial institutions, wealth management firms, and advisory businesses. As the firm continues to expand its AI capabilities, they are making significant investments in securing AI-enabled platforms, applications, and workflows. They are seeking a senior security professional to help drive AI security initiatives and strengthen the security posture of emerging technologies across the enterprise.

This individual will join a highly collaborative security engineering team focused on protecting cloud environments, AI systems, and critical business platforms through a combination of security architecture, engineering, threat detection, automation, and adversarial testing.

What You'll Be Doing

• Assess and strengthen the organization's security posture using automation, continuous validation, and offensive security techniques.
• Design and implement security controls across cloud, application, identity, and AI environments.
• Lead security architecture reviews, risk assessments, and control validation efforts for AI-enabled platforms and services.
• Build and enhance monitoring, detection, investigation, and response capabilities for AI-related threats.
• Conduct threat modeling, adversarial testing, red/purple team exercises, and security reviews of emerging AI technologies.
• Develop security automation to improve visibility, validate controls, and detect security gaps.
• Partner closely with engineering, infrastructure, and business teams to identify and mitigate security risks.
• Mentor team members and contribute to strategic security initiatives.

AI Security Responsibilities

• Secure AI platforms, agent frameworks, plugins, APIs, AI-assisted development tools, and autonomous workflows.
• Assess and mitigate risks associated with LLMs, RAG architectures, AI agents, and third-party AI solutions.
• Evaluate authentication, authorization, delegated access, service identities, OAuth/OIDC integrations, and trust relationships within AI ecosystems.
• Identify and defend against AI-specific threats including prompt injection, jailbreaking, model abuse, data poisoning, insecure outputs, and data exfiltration.
• Support the secure adoption of AI technologies across the software development lifecycle.

What We're Looking For

• Experience in Security Engineering, Security Architecture, Cloud Security, Application Security, or related cybersecurity disciplines.
• Strong knowledge of cloud environments, identity systems, application security, and enterprise security architecture.
• Hands-on experience securing AI/ML applications, GenAI solutions, LLM-based products, agent frameworks, or AI-enabled development platforms.
• Familiarity with technologies such as AWS Bedrock, Claude, Microsoft Copilot, GitHub Copilot, MCP integrations, or similar AI ecosystems.
• Strong understanding of OAuth, OIDC, workload identities, delegated permissions, service accounts, API security, and trust models.
• Experience performing security assessments, threat modeling, control validation, and risk analysis.
• Excellent communication and stakeholder management skills.

Preferred Experience

• AI red teaming or adversarial testing.
• Detection engineering, incident response, or security operations experience.
• Security automation and engineering tooling.
• Evaluation of third-party AI vendors and SaaS security risk.
• Relevant certifications such as CISSP, CCSP, GIAC, CSSLP, cloud security, or AI security certifications.