AI Security Engineer
Core
Secure BJAK's AI-enabled products and agent workflows using third-party models, focusing on customer data protection, agent permissions, and prompt injection prevention.
Role type
Senior IC AI Security Engineer
Builds
Security controls, monitoring, and response procedures for AI misuse and data exposure
Domain
Fintech / AI Security
Deliverable
production ML models
Required skills
Application security, AI system security, Prompt injection defense, Data isolation, Threat modeling, Python, TypeScript/Node.js, AWS/GCP, Third-party LLM integrations
Preferred skills
SC TRM and BNM RMiT controls experience, Regulatory risk assessment
Technologies
Python, TypeScript, Node.js, AWS, GCP, LLM APIs, RAG
Responsibilities
Assess customer data sent to third-party model vendors for minimization and retention; Design controls limiting AI agent permissions using least privilege; Implement and test tenant and user data isolation across prompts and services; Threat model and test prompt injection through uploaded documents and untrusted inputs; Partner with Product and Engineering on safe document ingestion and output validation; Support regulatory assessments for AI technology risks; Build security tests and response procedures for AI misuse and vendor incidents.
