AI Security Enngineer

Truist•Charlotte, NC

1d•Onsite

About The Position

The AI Security Engineer is responsible for implementing, validating, and supporting security controls for artificial intelligence, generative AI, and agentic solutions across the enterprise. This role works closely with AI engineering, application development, platform, cybersecurity, governance, and architecture teams to help ensure AI-enabled solutions are secure, resilient, compliant, and operationally ready. As a key contributor within the Forge AI Security organization, the AI Security Engineer assists in the design, implementation, testing, monitoring, and validation of security capabilities for AI-enabled applications, intelligent agents, retrieval-augmented generation (RAG) solutions, and enterprise AI platforms. The role supports security reviews, threat modeling activities, adversarial testing exercises, control validation efforts, and deployment readiness assessments throughout the AI delivery lifecycle. This position requires hands-on security engineering experience and a strong understanding of modern application security principles, cloud security, and AI security concepts. The role regularly partners with developers and solution teams to implement security controls, troubleshoot security issues, validate configurations, and improve the overall security posture of AI-enabled systems. The successful candidate will be comfortable working across no-code, low-code, and pro-code AI development environments and supporting AI solutions deployed within Microsoft Azure and AWS cloud platforms, including services such as Azure AI, Azure OpenAI, and Amazon Bedrock.

Requirements

Bachelor’s degree or equivalent education, training, and work-related experience.
Minimum of 5 years of experience in security engineering or related cybersecurity roles.
Advanced knowledge in cybersecurity principles, theories, and concepts.
Proven experience in software development lifecycle security practices.
Advanced knowledge of threat modeling, security testing, and penetration testing.
Experience implementing and managing complex information security technologies.
Understanding of AI and LLM security concepts including prompt injection, jailbreak techniques, sensitive data exposure, tool-use risks, model misuse, and output handling concerns.
Familiarity with AI-enabled applications, intelligent agents, automation platforms, or generative AI solutions.
Knowledge of cloud-native security principles, access control, identity management, secrets handling, and secure integration design.
Understanding of monitoring, logging, alerting, and observability concepts.
Familiarity with no-code, low-code, and pro-code development environments and associated security considerations.
Strong analytical, troubleshooting, and problem-solving skills.
Effective written and verbal communication skills

Nice To Haves

Minimum of 5 years of experience in cybersecurity engineering, application security, cloud security, software engineering, DevSecOps, or related technical disciplines.
Experience implementing security controls for enterprise applications, APIs, cloud-native solutions, or distributed systems.
Experience participating in security reviews, security testing, vulnerability management, or threat modeling activities.
Experience supporting software development lifecycle security practices.
Experience collaborating with software engineering and technology teams to address security requirements and remediation activities.
Experience implementing or supporting security controls for generative AI, AI-enabled applications, agentic systems, or intelligent automation platforms.
Experience with Microsoft Azure security services, Azure AI Services, Azure OpenAI, Azure AI Foundry, Copilot Studio, or related technologies.
Experience with AWS cloud services, including Amazon Bedrock and related AI capabilities.
Experience performing application security testing, penetration testing, vulnerability assessments, or security validation activities.
Experience working in financial services, banking, healthcare, government, or other regulated industries.
Experience supporting governance, compliance, or audit-driven technology environments.
Familiarity with retrieval-augmented generation (RAG), vector databases, agent orchestration frameworks, and AI workflow platforms.
Industry certifications such as Security+, Azure Security Engineer Associate, AWS Security Specialty, CISSP Associate, GIAC certifications, or similar credentials.

Responsibilities

Implement and maintain security controls for AI-enabled applications, agentic workflows, intelligent automation solutions, and AI platforms.
Support secure integration of AI services, APIs, orchestration frameworks, and external tool connections.
Configure and validate security controls including identity protections, access controls, secrets management, logging, monitoring, and deployment safeguards.
Assist engineering teams in implementing secure patterns for AI and generative AI solutions.
Support AI solution development across no-code, low-code, and pro-code environments.
Participate in security architecture reviews, threat modeling activities, and AI security assessments.
Assist in identifying security risks, design weaknesses, and control gaps within AI-enabled solutions.
Perform validation testing to verify effectiveness of implemented controls and security requirements.
Support adversarial testing, misuse-case analysis, vulnerability assessments, and deployment readiness reviews.
Document findings, recommendations, remediation activities, and validation results.
Build and maintain monitoring and alerting capabilities for AI-enabled applications and workflows.
Develop and enhance detection logic designed to identify suspicious prompts, unusual workflow behavior, unauthorized access attempts, and policy violations.
Support collection and analysis of telemetry used to monitor AI system health, security, and compliance.
Assist cybersecurity operations teams with investigation and remediation of AI-related security events.
Partner with software engineering, platform, product, architecture, and cybersecurity teams to implement security requirements throughout the development lifecycle.
Support project teams by providing technical guidance on secure implementation practices and control requirements.
Participate in design reviews, working sessions, and implementation discussions to ensure security considerations are included early in the delivery process.
Assist in remediation planning and implementation activities for identified security findings.
Stay current on emerging AI security risks, threats, technologies, and industry trends.
Contribute to the improvement of AI security controls, monitoring capabilities, testing practices, and implementation standards.
Assist in the development of security documentation, implementation guides, runbooks, and operational procedures.
Support automation efforts that improve security efficiency, consistency, and control effectiveness.