Senior AI Security Engineer

Mercola•Cape Coral, FL

1d•$130,000 - $150,000

About The Position

The Senior AI Security Engineer will own day-to-day enterprise security, lead technical incident response, and help Mercola use and secure AI across the business. The role is the primary internal security practitioner, working with Infrastructure and Engineering partners who retain responsibility for implementation in their respective areas. The engineer sets security requirements, coordinates response, and verifies closure, while leadership owns budget and material business-risk decisions. The position spans enterprise incident response, security automation, and AI security. The successful candidate will establish ownership, an actionable risk backlog, dependable monitoring, and tested escalation; validate priority identity, credential, endpoint, and logging controls; drive findings to verified closure; and deliver repeatable automation and a safe AI-assisted workflow with usable runbooks and backup ownership.

Requirements

Hands-on experience in security engineering, incident response, or security operations, with examples of taking issues through investigation, remediation, and verification.
Practical experience securing hybrid environments across Microsoft 365 and Entra ID, cloud services such as AWS, endpoints, and networks.
Ability to interpret logs and assess access, application permissions, and potential data exposure.
Experience using AI assistants in engineering or security work, with the ability to explain how permissions are limited, sensitive information is protected, and AI-generated output is validated.
Ability to write scripts, work with APIs, and review application code or configurations for security issues.
Familiarity with Git and CI/CD workflows.
Ability to prioritize competing security work, coordinate technical owners and providers, and communicate risks and decisions clearly to leadership.
Sound judgment about evidence preservation, testing authorization, production changes, and when to involve specialists.

Nice To Haves

Experience with Microsoft Defender or comparable endpoint protection, SIEM, or managed detection services.
Experience with Azure DevOps, application or API security testing, cloud or container security, or governance of AI coding tools and MCP integrations.
Relevant certifications or a degree; demonstrated capability and equivalent experience are valued equally.

Responsibilities

Own the incident queue, risk register, and remediation backlog; assign owners and deadlines; maintain policies and runbooks; and report progress and unresolved risks to leadership.
Lead technical incident response from triage through recovery validation, coordinating containment, preserving evidence, and involving Legal or specialist responders as needed.
Strengthen identity, access, and infrastructure controls across Microsoft 365, Entra ID, AWS, and connected applications; partner with Infrastructure to verify improvements across endpoints, servers, networks, and cloud platforms.
Validate logging coverage, retention, alert delivery, and after-hours escalation with internal owners and managed security providers.
Use AI assistants for investigation, code review, threat analysis, and automation; independently validate findings and proposed fixes; and secure AI applications, agents, and MCP integrations against prompt injection, excessive permissions, data exposure, and unsafe tool actions.
Partner with Engineering on application, API, and mobile security; integrate code, dependency, and secret scanning into development workflows; prioritize exploitable findings; coordinate authorized testing; and verify remediation.
Build security automation with Python, PowerShell, APIs, or comparable tools, documenting ownership, failure alerts, audit trails, and rollback procedures.
Assess vendor security, data flows, and third-party access; maintain security evidence for applicable contractual, privacy, and compliance needs; and coordinate security awareness and specialist support.
Help define backup coverage, provider responsibilities, and after-hours escalation.
Establish clear ownership, an actionable risk backlog, dependable monitoring, and tested escalation during the first 90 days.
Validate priority identity, credential, endpoint, and logging controls; drive findings to verified closure; and deliver repeatable automation and a safe AI-assisted workflow with usable runbooks and backup ownership.

Benefits

Medical, dental, and vision coverage.
Optional accident, hospital indemnity, and critical illness coverage.
Employee Assistance Program (EAP).
Employer-paid life and AD&D insurance.
Optional supplemental life and AD&D insurance.
Short- and long-term disability insurance.
Flexible Spending Accounts.
Health Savings Accounts.
Dayforce Wallet – get paid as you earn.
Employee discount.
Retirement planning with a 401(k) and matching contribution.
Pet insurance.
Wellness program offerings.
Paid time off accrued per pay period based on years of service, starting at 15 days annually.
Nine paid holidays per year, including one floating holiday.