• Fortalecer y evaluar la postura de seguridad en la nube (CSPM) • Integrar controles dentro del ciclo de desarrollo de software (DevSecOps) • Trabajar con equipos de ingeniería en revisiones de arquitectura y auditorías de cumplimiento

Role Description We are seeking an AI Security Engineer to lead the design and implementation of security controls, threat models, and incident response capabilities specifically tailored to AI and machine learning systems. The role addresses the unique security challenges posed by LLMs, model APIs, training data pipelines, and AI-powered applications, including prompt injection, model abuse, data exfiltration, and supply chain risks. The ideal candidate has strong security engineering fundamentals and a deep understanding of how modern AI systems work in practice, with hands-on experience designing defenses for both AI-powered applications and the AI infrastructure that supports them. Key Responsibilities - Define and implement security controls specifically targeting LLM and AI-powered application risks. - Build threat models for AI systems, including prompt injection, jailbreaks, data exfiltration, and abuse patterns. - Design and deploy guardrails, content filters, and policy enforcement layers around model endpoints. - Implement runtime detection and response capabilities for adversarial prompts and abusive behavior. - Secure training and fine-tuning pipelines, including data provenance, integrity, and access controls. - Design controls for sensitive data handling, retention, and redaction in LLM workflows. - Lead red-team exercises against AI systems and drive remediation of identified weaknesses. - Evaluate and harden third-party AI services and open-source AI components used internally. - Implement identity, authorization, and tenant-isolation patterns for multi-tenant AI services. - Drive supply chain security for ML artifacts including weights, datasets, and inference dependencies. - Collaborate with privacy, legal, and compliance teams to ensure AI systems meet regulatory obligations. - Develop monitoring, logging, and detection strategies tailored to AI workloads. - Lead incident response for AI-specific security events and drive durable improvements. - Stay current with adversarial ML, LLM security research, and emerging regulatory developments. Qualifications - Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related discipline. - Six or more years of security engineering experience, including significant work on AI or ML systems. - Strong understanding of LLM internals, modern AI architectures, and common failure modes. - Hands-on experience designing security controls for AI-powered applications. - Deep knowledge of application security, identity, and cryptography fundamentals. - Experience with threat modeling and security architecture review processes. - Familiarity with adversarial ML, prompt injection, and model abuse research. - Proficiency in Python and at least one systems language. - Strong understanding of cloud security and modern infrastructure controls. - Excellent written and verbal communication skills. Preferred Qualifications - Publications, talks, or CTF participation in AI security topics. - Experience with red-teaming LLM-based products. - Familiarity with privacy-preserving ML techniques such as differential privacy. - Exposure to regulated industries with strict data handling requirements. - Open-source contributions to AI security tooling. How to Apply Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 505-3544. Learn more about Bright Vision Technologies at www.bvteck.com . Equal Employment Opportunity (EEO) Statement Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall. BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.

• Engineer **technical risk solutions** that reduce operational, cyber, and resilience risk through architecture, automation, and control design — starting on day one with minimal onboarding. • Translate **risk requirements, policies, and standards** into implementable technical patterns, guardrails, and reference architectures. • Prioritize and influence **solution design decisions** based on risk impact, blast radius, and recovery dependencies. • Partner with platform, cloud, security, and SRE teams to embed risk controls directly into infrastructure and pipelines. • Evaluate control effectiveness using **technical signals and evidence**, not just procedural compliance checklists. • Independently support the requirements of internal control, internal audit, and external audit engagements, including evidence gathering, control testing, and remediation tracking. • Deploy and manage security software, assess and apply required security patches on Security Appliances (servers). • Support the Security Appliances **24x7 on-call rotation** to enable continuous data collection. • Drive initiatives such as secure cloud architecture, isolated recovery environments, identity and access hardening, and infrastructure resilience. • Provide informed, immediate guidance on **risk tradeoffs and compliance requirements** to engineering and business stakeholders. • Contribute to lightweight process definition where needed, always in service of enabling better technical and audit outcomes.

• Design and maintain the network infrastructure • Manage firewalls and security • Monitor and troubleshoot the network • Manage compliance and risk • Documentation and change management • Collaboration and support • Continuous improvement