Security Engineer, AI Platforms & Infrastructure

The Carlyle Group Employee Co. • New York, NY

2d • Hybrid

About The Position

The Security Engineer is a hands-on technical role that strengthens how Carlyle secures its adoption of AI. This role secures AI platforms and agentic tooling as they’re adopted across the firm and extends core security engineering practices into the identity, network, and logging capabilities that support them. This role owns the implementation and continuous improvement of security controls protecting AI systems throughout their lifecycle, from onboarding and integration review through ongoing monitoring and retirement and brings strong automation to bear as the firm’s technology footprint evolves.

Requirements

• Bachelor’s degree, required
• Concentration in cybersecurity, computer science, information systems, engineering, or a related discipline strongly preferred, or equivalent relevant professional experience.
• Relevant certifications in security engineering, cloud security, identity, or AI/ML security are preferred.
• Minimum 5-7 years of overall relevant technical experience, required
• Minimum 3 years of experience information security or cybersecurity engineering experience, required
• Hands-on experience securing platforms and agent or tool-based systems, including authentication, authorization, guardrails, and usage monitoring.
• Experience with Model Context Protocol (MCP), agent frameworks, tool integrations, or comparable integration patterns, including reviewing third-party integrations for security risk.
• Experience with privileged access management platforms and secrets management for service accounts and automation.
• Experience with network security technologies, including next-generation firewalls, SASE/ZTNA, web application firewalls, and modern enterprise networking.
• Enough Linux administration skills to harden servers and to evaluate AI-generated scripts and configurations across various distributions.
• Experience building automation with a general-purpose language (Python, Bash, or similar) and integrating systems through APIs and structured data formats.
• Experience building or operating logging and telemetry pipelines and integrating with SIEM platforms.
• Experience with identity platforms and endpoint security tooling is preferred.

Nice To Haves

• Concentration in cybersecurity, computer science, information systems, engineering, or a related discipline strongly preferred, or equivalent relevant professional experience.
• Relevant certifications in security engineering, cloud security, identity, or AI/ML security are preferred.
• Experience with identity platforms and endpoint security tooling is preferred.

Responsibilities

• Secure and operate the AI gateway that brokers access between users, agents, and downstream model providers and connected services, including authentication, authorization, guardrails, and usage governance.
• Review and harden AI agent and tool integrations for excessive scope, credential handling, and data-exfiltration risk before and after deployment.
• Define and enforce security guardrails for model inputs, outputs, and tool usage.
• Partner with platform owners to pilot new guardrail configurations and measure their effectiveness.
• Build automation using supported APIs, reducing manual and error-prone security operations.
• Support privileged access management across the environment.
• Secure network paths across the security stack, including SD-WAN, firewall, SASE/ZTNA, and WAF policies for API and platform traffic.
• Support broader network and endpoint security engineering work as capacity allows, including firewall migrations, SSL inspection tuning, and device-posture troubleshooting.
• Design and build logging and telemetry infrastructure to support security monitoring across the environment.
• Evaluate and integrate telemetry pipeline technologies to route security logs reliably and cost-effectively to the SIEM.
• Work with data retention, normalization, and enrichment standards for logs so analysts and automation can act on them; identify and close logging and data-quality gaps.
• Build dashboards, alerts, and health checks to monitor availability, security posture, performance, and reliability across assigned capabilities.

Benefits

• Comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs.
• May also be eligible to participate in an annual discretionary incentive program.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior