Senior AI Security Security

OneStream

16h•$131,000 - $170,000

About The Position

The Senior AI Security Engineer is the senior technical owner for the day-to-day security of OneStream’s internal AI environment. The role drives technical execution of the internal AI security strategy and ensures internal AI platforms, connectors, agents, and workflows are deployed securely. It co-develops and executes the internal AI security roadmap with the AI Security Architect/Manager; architects and operates the AI Detection and Response capability; establishes security review standards for AI tooling; owns internal AI security metrics; and champions AI automation for the Security team. This is a senior, hands-on, high-autonomy position reporting to the AI Security Architect/Manager. It partners with IT, Legal, Compliance, Privacy, and business leaders to enable secure AI adoption, makes independent risk decisions, and provides technical leadership and mentorship as the AI Security function grows.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
At least 6 years of experience in security engineering, security operations, application security, or a related security discipline, including military or government cybersecurity roles.
At least 1–2 years of demonstrated hands-on experience securing or building with LLM-based systems, such as enterprise AI assistants, agents, tool-calling and connector integrations, or retrieval-augmented workflows.
Demonstrated experience owning a security program, capability, or major initiative end to end, including setting technical direction and making independent risk decisions.
Working knowledge of AI-specific threats, including prompt injection, jailbreaks, tool abuse, and data exfiltration through agents, and frameworks such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework.
Experience reviewing SaaS security posture, identity and access controls, least-privilege configurations, and data-sharing configurations.
Experience conducting third-party and vendor security risk assessments and driving remediation with vendors and internal owners.
Experience with detection engineering, SIEM and log analysis, and building monitoring and alerting for new data sources.
Proficiency in scripting and automation (Python or similar), working with APIs, and integrating tools and platforms.
Strong written and verbal communication skills, including explaining AI risk and trade-offs to technical and non-technical stakeholders, Security leadership, and executives.

Nice To Haves

Demonstrated leadership and cross-functional collaboration, including mentoring engineers and partnering with IT, Legal, Compliance, and business teams to deliver shared outcomes, build consensus, and influence decisions without direct authority.
Experience administering and securing enterprise AI assistant platforms, including connector, agent, and MCP server configurations.
Experience with integration or automation platforms (iPaaS) and API gateways as security control points for AI connectors.
Experience building AI-assisted security operations automation, such as LLM-driven alert triage, enrichment, or SOAR workflows.
Experience with adversarial testing or red-teaming of LLM applications and agents.
Experience building a new security capability or function from the ground up.
Security certifications such as CISSP, CCSP, OSCP, GIAC, or AI-security-specific credentials.
Experience in a SaaS or software company and familiarity with SOC 2, ISO 27001, or similar compliance frameworks.

Responsibilities

Own day-to-day security for OneStream’s internal AI environment, including enterprise AI assistant platforms, agents, connectors and tool integrations such as MCP, and AI-enabled business workflows from intake through production.
Co-develop and execute the internal AI security roadmap with the AI Security Architect/Manager.
Define and own security review standards for enterprise AI assistant and agent configurations, connectors, and workflows, including tenant controls, permissions, data-sharing and retention settings, integrations, custom agents, and skills.
Make independent approval decisions and establish secure-by-default baselines for internal AI builders.
Architect, implement, and own the AI Detection and Response capability, monitoring enterprise AI usage and detecting prompt injection, tool abuse, data exfiltration, and anomalous agent behavior; integrate alerting and response into Security Operations workflows.
Lead security reviews of new and third-party AI tools, including AI-enabled SaaS features, connectors, MCP servers, and models; serve as the escalation point for complex or high-risk reviews.
Identify and lead AI automation opportunities in security operations, including alert triage and enrichment, detection engineering, and vulnerability management.
Lead threat modeling for internal AI use cases against AI-specific attack classes and influence architecture decisions across IT and Engineering.
Define, implement, and own the internal AI security metrics program; report security posture and program progress to Security leadership.
Partner with IT, Legal, Privacy, and business teams to turn AI acceptable-use, data-classification, and security policies into technical guardrails, secure-by-default patterns, review checklists, and training.
Lead investigations, containment, and remediation for incidents involving internal AI systems, and incorporate lessons learned into controls and detections.
Monitor the emerging AI threat landscape and frontier model capabilities, translating developments into updated controls, detections, and guidance.
Provide technical leadership and mentorship to AI Security team members, guide future hires, and raise AI security capability across the broader Security team.