AI Security Engineer

Obsidian Security•Palo Alto, CA

2d•£155,000 - £180,000

About The Position

Obsidian Security is seeking an AI Security Engineer to define how the company understands, identifies, and mitigates risk in AI and agentic platforms. This role involves owning threat models and data modeling to protect customers, and working directly with data to analyze security judgments and queries. The position is crucial as AI is rapidly evolving, creating new attack surfaces with tools like Copilot, ChatGPT Enterprise, Gemini, and Claude being integrated into corporate SaaS environments, often with broad permissions and opaque data flows.

Requirements

3+ years in security engineering as a builder, with clear ownership of shipped work.
Strong grasp of identity and access control concepts
Hands-on experience with a modern data stack (DBT and a columnar warehouse or query engine such as ClickHouse, Snowflake, BigQuery, or Databricks).
Clear communicator across engineers, PMs, and customer security teams.

Nice To Haves

Strong grasp of how SaaS platforms (Google Workspace, Microsoft 365, Salesforce, Okta) expose data — APIs, event schemas, permissions, auth flows.
Deep knowledge of AI and SaaS security — OWASP LLM Top 10, MITRE ATLAS, prompt injection, agent/tool-use risks, OAuth abuse, and identity models across major AI and SaaS platforms.

Responsibilities

Develop deep expertise in how AI platforms (ChatGPT Enterprise, Copilot, Gemini, Claude, Glean, agentic frameworks) authenticate, what scopes they request, and where risk concentrates.
Research emerging AI attack techniques — prompt injection, tool/agent misuse, RAG poisoning, over-permissioned integrations — and turn them into detections and posture checks.
Build threat models covering identity, data access, non-human identities, and integration risk.
Prototype and ship product features end-to-end against Obsidian's AI and SaaS telemetry.
Build and improve data pipelines for high efficiency, development velocity, and low cost.