Staff Information Security Engineer - AI First

Rithum LinkedIn Board

9d•$170,000 - $220,000•Remote

About The Position

Rithum is seeking a Staff Information Security Engineer to guide the secure adoption of AI across the company. The role sits at the intersection of AI adoption and information security, designing guardrails for AI-powered products, building automated security tooling, and implementing controls and monitoring for an AI-first workforce. The engineer will turn security requirements into practical, scalable implementations, including infrastructure-as-code controls and automated workflows, while helping teams move quickly without creating unseen risk. The position works autonomously and balances research with rapid delivery. It collaborates closely with Platform Engineering, IT, Security Champions, and external auditors, bridging architectural intent and operational implementation. Responsibilities include securing AI systems and agents, enforcing identity and access standards, automating security operations, and translating emerging risks into actionable guidance.

Requirements

At least 5 years of security engineering experience with demonstrated depth in AI/ML security, including prompt injection, model supply chains, adversarial inputs, and RAG.
Experience using AI tools such as ChatGPT, Copilot, or Claude, and LLM frameworks and APIs such as OpenAI, Anthropic, or LangChain, to improve work.
Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities.
Experience with infrastructure-as-code and policy-as-code, such as Terraform and OPA/Rego, and proficiency in a scripting language; Python is preferred.
Cloud security expertise, such as AWS Solutions Architect or Security Specialty certification or equivalent demonstrated expertise, including multi-account governance, preventive guardrails, and policy-as-code.
Application security knowledge, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC.
Knowledge of threat-modeling methodologies such as STRIDE, PASTA, or equivalent.
Practical experience building or operating AI agents and integrating security tooling such as SIEM, CSPM, SAST/DAST/SCA so it surfaces actionable information rather than raw alerts.
Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

Nice To Haves

Experience building or operating AI agents in a production environment.
Awareness of privacy regulations such as GDPR and CCPA as they relate to AI, including privacy-by-design and DPIAs.
Red teaming or adversarial ML research background.
Experience implementing privileged-access, key-management, posture-management, or data-protection programs.
Experience with EDR, CASB, DLP, security automation, and SAST, DAST, IAST, and SCA tools.
Cloud Architecture or Security certifications such as CCSK, TAISE, or AWS.

Responsibilities

Bridge architectural intent and operational reality by mediating security and implementation needs, proposing compensating controls, and helping register, track, and remediate residual risks.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code and infrastructure-as-code, including controls for AI tools and models.
Implement and enforce identity and access controls, including access boundaries for AI systems and non-human or agent identities, in partnership with Platform Engineering and IT.
Help maintain the information security risk register, track emerging threats, and translate them into actionable guidance for engineering teams.
Support third-party and vendor risk assessments, particularly for vendors processing data through AI pipelines.
Automate repetitive security workflows such as evidence collection, access reviews, and alert enrichment.
Build or operate AI-assisted security agents with human approval gates, least-privilege credentials, and explicit consideration of each agent's blast radius.
Integrate security tooling such as SIEM, CSPM, DAST/SAST, and vulnerability scanners with LLM layers to produce actionable insights and automated responses.
Define and enforce security requirements for AI-powered features, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
Conduct threat modeling for agentic and LLM-based systems, accounting for tool misuse, indirect prompt injection, and supply-chain risk.

Benefits

Medical, dental, and vision plans, with company HSA contributions starting on Day 1.
6% 401(k) match.
Paid time off package: 20 PTO days, 9 company-paid holidays, 2 paid floating holidays, 7 paid sick days, 2 wellness days, and 1 paid volunteer day; PTO increases to 22 days after 3 years and 25 days after 5 years.
12 weeks of primary caregiver leave and 4 weeks of secondary caregiver leave.
Accident, critical illness, and hospital indemnity insurance.
Pet insurance.
Legal assistance and identity theft insurance plans.
Life insurance at 2 times salary.
Access to the Calm app and Employee Assistance Program.
$65 per month remote work stipend for internet.
Culture and team-building activities.
Tuition assistance.
Career development opportunities.
Charitable contribution match up to $250 per year.
Discretionary bonus of 12% of annual base salary for this position.