AI Security Engineer (GRC) | W2 Only (No OPT) | Remote |
Xlysi•Chicago, IL
•Remote
About The Position
We are seeking an experienced AI Security Engineer (GRC) to lead secure AI adoption within a HIPAA-regulated healthcare environment. This role will act as a subject matter expert at the intersection of AI and cybersecurity, focusing on vendor risk assessment, secure implementation, and governance of AI/LLM platforms.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, or related field
- 7+ years of experience in Information Security
- 2+ years of experience in AI/ML security or AI technology evaluation
- Hands-on experience with AI tools such as Azure AI, Copilot, OpenAI/Claude APIs, or similar
- Strong knowledge of AI/LLM security risks (prompt injection, data leakage, model attacks)
- Experience with vendor risk assessments and security documentation
- Understanding of frameworks: NIST AI RMF, HITRUST, OWASP (LLM Top 10)
- Experience in HIPAA-regulated environments (Healthcare preferred)
- Identity & Access Management (OAuth2, OIDC, SAML)
- API and Network Security
- AI/LLM frameworks (LangChain, AutoGen, Semantic Kernel)
- Threat modeling (STRIDE, PASTA)
- Cloud security (Azure preferred)
- SIEM/SOAR and logging practices
Nice To Haves
- Experience with AI red-teaming tools (Garak, PyRIT, PromptBench)
- Knowledge of MITRE ATT&CK / ATLAS
- Familiarity with EU AI Act and healthcare AI regulations
- Experience securing AI CLIs and agentic workflows
Responsibilities
- Conduct security assessments of AI vendors and tools prior to adoption
- Evaluate data handling, model transparency, and compliance posture of AI platforms
- Provide secure implementation guidance for AI tools including Copilot Studio, Azure AI, Snowflake Cortex, and LLM-based systems
- Review and secure AI integrations such as APIs, MCP servers, agentic workflows, and CLIs
- Enforce secure configurations, authentication standards, and least-privilege access controls
- Perform AI threat modeling, risk assessments, and red-team exercises
- Maintain AI risk register aligned with NIST AI RMF
- Ensure compliance with HIPAA, HITECH, and security policies
- Review AI architecture for data security, PHI protection, and trust boundaries
- Support governance, security approvals, and CAB processes for AI deployments
- Develop security policies, standards, and training for AI adoption
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
