Staff Information Security Engineer

Rithum

6d•$170,000 - $220,000•Remote

About The Position

Rithum is seeking a Staff Information Security Engineer to connect AI adoption with information security. The role designs guardrails for AI-powered products, builds automated security tooling, and develops security controls and monitoring for an AI-first workforce. It emphasizes turning recurring controls into infrastructure-as-code, manual reviews into workflows, and AI risks into concrete, enforceable safeguards. The engineer works autonomously and collaborates with Platform Engineering, IT, Security Champions, and external auditors. The position applies preventive security controls across cloud and enterprise environments, including identity and access protections for AI systems and non-human identities. It also supports risk management, vendor assessments, security workflow automation, AI-assisted security agents, integration of security tools with LLM layers, and threat modeling for agentic and LLM-based systems. The role is remote-first and may require travel up to 10%.

Requirements

At least 5 years of security engineering experience with demonstrated depth in AI/ML security, including prompt injection, model supply chain, adversarial inputs, and RAG.
Experience using AI tools such as ChatGPT, Copilot, or Claude and LLM frameworks and APIs such as OpenAI, Anthropic, or LangChain to accelerate work.
Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities.
Experience with infrastructure-as-code and policy-as-code, such as Terraform and OPA/Rego, and proficiency in a scripting language; Python preferred.
Cloud security expertise, including multi-account governance, preventive guardrails, and policy-as-code; AWS Solutions Architect or Security Specialty certification, or equivalent demonstrated expertise.
Application security knowledge, including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC.
Experience with threat-modeling methodologies such as STRIDE or PASTA, or equivalent.
Practical experience building or operating AI agents and integrating security tooling such as SIEM, CSPM, SAST/DAST/SCA so it surfaces actionable information rather than raw alerts.
Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

Nice To Haves

Experience building or operating AI agents in a production environment.
Awareness of privacy regulation, including GDPR/CCPA as it relates to AI, privacy-by-design, and DPIAs.
Red teaming or adversarial ML research background.
Experience implementing privileged-access, key-management, posture-management, or data-protection programs.
Experience with EDR, CASB, DLP, security automation, and SAST, DAST, IAST, and SCA tools.
Cloud Architecture or Security certifications, such as CCSK, TAISE, or AWS.

Responsibilities

Bridge architectural security intent and operational implementation; mediate conflicts between security requirements and feasible implementation, propose compensating controls, and help register, track, and remediate residual risks.
Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code and infrastructure-as-code, including controls governing AI tools and models.
Implement and enforce identity and access controls to an agreed standard, including access boundaries for AI systems and non-human or agent identities, in partnership with Platform Engineering and IT.
Assist in maintaining the information security risk register, track emerging threats, and translate them into actionable guidance for engineering teams.
Support third-party and vendor risk assessments, especially for vendors processing data through AI pipelines.
Automate repetitive security workflows such as evidence collection, access reviews, and alert enrichment.
Build or operate AI-assisted security agents with human-in-the-loop approval gates, least-privilege credentials, and explicit attention to each agent’s blast radius.
Integrate security tooling, including SIEM, CSPM, DAST/SAST, and vulnerability scanners, with LLM layers to surface actionable insights and automated responses.
Define and enforce security requirements for AI-powered features, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.
Conduct threat modeling on agentic and LLM-based systems, accounting for tool misuse, indirect prompt injection, and supply-chain risk.

Benefits

Medical, dental, and vision benefits; affordable health care plans and company HSA contributions starting on Day 1.
A 6% 401(k) match.
Paid time off: 20 days, increasing to 22 days after 3 years and 25 days after 5 years of service.
9 company-paid holidays, 2 paid floating holidays, 7 paid sick days, 2 wellness days, and 1 paid volunteer day.
12 weeks of primary caregiver leave and 4 weeks of secondary caregiver leave.
Accident, critical illness, and hospital indemnity insurance.
Pet insurance.
Legal assistance and identity theft insurance plans.
Life insurance equal to 2 times salary.
Access to the Calm app and Employee Assistance Program.
$65 per month remote-work stipend for internet.
Culture and team-building activities.
Tuition assistance.
Career development opportunities.
Charitable contribution match up to $250 per year.
Discretionary bonus of 12% of annual base salary for this position.
Comprehensive benefits package and industry-competitive compensation.