Sr. Security Engineer (AI)

Hi Marley • Boston, MA

2d • $121,000 - $226,000 • Hybrid

About The Position

Hi Marley is seeking a Sr. AI Security Engineer to help secure the company's use of AI, focusing on the internal AI environment including tools, agents, and integrations. This role involves hands-on engineering within established security frameworks, including threat modeling, adversarial testing, and evidence production for auditors. The position is ideal for an experienced security engineer with deep AI/ML knowledge who wants to focus on emerging AI security challenges. The role requires collaboration and enthusiasm, with a hybrid work model involving 2-3 days per week in the Boston office.

Requirements

• 5+ years in security engineering, application security, or infrastructure security, with hands-on exposure to AI/ML systems.
• Experience securing or building LLM-based systems, agentic frameworks, or ML pipelines in cloud environments.
• Solid understanding of AI-specific attack surfaces: prompt injection, tool-use exploitation, privilege escalation through inherited access, data poisoning, and model/training-data leakage.
• Hands-on familiarity with how AI systems actually work. You’ve built with them, not just read about them.
• Strong proficiency in Python and experience building security tooling, automation, and testing.
• Strong working knowledge of AWS security: IAM, networking, container isolation, encryption, and monitoring.
• Familiarity with compliance frameworks (SOC 2, ISO 27001, ISO 42001, NIST AI RMF) and mapping technical controls to audit requirements.
• Ability to communicate technical risk clearly to engineers, auditors, and stakeholders.

Nice To Haves

• Experience running or contributing to AI red-teaming or adversarial testing.
• Experience with MCPs, agent orchestration frameworks, or similar agentic infrastructure.
• Background in DLP, monitoring, or observability for AI or cloud workloads.
• Experience at a growth-stage B2B SaaS company.

Responsibilities

• Apply Hi Marley’s AI security design patterns and reference architectures to LLM integrations, agent frameworks, MCP connectors, and data pipelines across the internal environment.
• Lead threat modeling for new AI capabilities before they ship, identifying architectural risks and driving mitigations into the design phase.
• Implement and enforce controls for agent isolation, least-privilege execution, credential scoping, and data-boundary enforcement in agentic environments.
• Maintain a current inventory of AI tools and integrations in use across the organization, tracking data flows, permission scopes, and access controls.
• Track emerging AI security research, attack techniques, and defensive tooling, and bring relevant findings into our practices.
• Run the risk assessment process for internal AI tools, integrations, and third-party model providers against the established methodology.
• Execute the AI red-teaming cadence (e.g. adversarial testing for prompt injection, data exfiltration, model manipulation, and jailbreaking) and drive remediation.
• Operate the agent and MCP connector lifecycle, from proposal through approval, deployment, monitoring, and retirement.
• Own the security evaluation of new AI tool requests, including vendor risk assessments, data-handling reviews, and baseline configuration; surface unapproved tools and bring them under governance.
• Maintain AI security incident response runbooks and help respond when something goes wrong.
• Track and report AI security metrics that demonstrate program health.
• Produce compliance evidence and documentation for AI systems supporting SOC 2 Type II examinations and ISO 42001 certification.
• Translate technical decisions into clear, auditor-ready explanations of what we do, how it works, and why it is safe.
• Partner with AI Operations and Corporate IT to embed security into the internal AI platform: access controls for inference APIs, isolation for cloud-hosted agentic workloads, and endpoint/DLP configuration.
• Contribute employee-facing guidance on safe AI use.

Benefits

• Equity grants for all employees
• A 4% matching 401(k) program
• Medical, dental, vision, disability, and life insurance coverage for employees working 30+ hours per week
• Monthly wellness stipend
• Paid parental leave
• A flexible vacation policy

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed