> Markdown version of [/jobs/ext/1505063-senior-ai-security-engineer](https://www.wearedevelopers.com/jobs/ext/1505063-senior-ai-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior AI Security Engineer - **Company:** Highmark Inc. - **Location:** Des Moines, IA, United States (Remote available) - **Experience:** Expert - **Salary:** $94,200.0 - $151,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Engineering, Information Engineering, Information Leak Prevention, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Open Web Application Security, Data Logging, Data Processing, Google Cloud, Cloud Platform System, Large Language Models, Software Security, Multi-Cloud, Generative AI, AI Platforms, Information Technology, Enterprise Integration, Machine Learning Operations, Automation Anywhere, Security Orchestration, Automation & Response - **Published:** July 30, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3336328156&tx=YT101TYI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role Required * 5 years of experience in Cybersecurity engineering, application security, or platform security * 3 years of experience in AI/ML or Generative AI security (prompt injection defense, unsafe output handling, tool-use abuse, data leakage) Preferred * 5 years of experience in Securing production systems in enterprise environments * 3 years of experience in Hybrid multi-cloud security (Azure, GCP, AWS) * 2 years of experience in Detection engineering, monitoring, and alerting for complex application or workflow environments * 2 years of experience in AI red-team execution (jailbreaking, behavioral drift, misuse-case validation; tools such as PyRIT, Promptfoo, AgentDojo * 2 years of experience in Securing agentic systems, multi-step AI workflows, or tool-calling architectures * 2 years of experience in Highly regulated industry (healthcare, financial services) with HIPAA or equivalent compliance obligations * 1 year of experience in Identity, access management, secrets handling, and runtime policy enforcement for AI workloads, * Deep working knowledge of AI/LLM security risks: prompt injection, unsafe outputs, tool-use abuse, data leakage, identity misuse, and agentic workflow escalation * Hands-on proficiency with AI security frameworks: NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10 * Cloud security fluency across Azure, GCP, and AWS, including native security tooling (Defender for Cloud, Wiz, GCP SCC) * Adversarial testing experience with AI red-team tooling (PyRIT, Promptfoo, AgentDojo, or custom harnesses) * Detection engineering - building monitoring logic, alerting pipelines, and telemetry for AI system behavior * Proficiency in Python (or equivalent) for security automation, test harness development, and pipeline integration * Secure API design, access controls, secrets management, and environment-based deployment controls for AI workloads * HIPAA data handling requirements and PHI/PII protection considerations in AI pipelines and agentic workflows * Strong written and verbal communication - capable of producing technical findings, remediation guidance, and executive security narratives * Ability to operate effectively as a senior individual contributor in a large, matrixed healthcare organization EDUCATION Required * Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or closely related discipline or relevant experience and/or education as determined by the company in lieu of bachelor's degree. Preferred * Master's degree in Cybersecurity, Computer Science, or a related field LICENSES or CERTIFICATIONS, * Certified Information Security Professional (CISSP) * AWS Certified Security Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer * AI security credentials or coursework (SANS AI Security, NIST AI RMF practitioner training) Language (Other than English) ## Description * Design, implement, and operate security controls for AI/ML, GenAI, and agentic systems - spanning model-level, data-level, and platform-level protections across Azure, GCP, AWS, and SaaS. * Engineer and enforce guardrails that mitigate prompt injection, unsafe outputs, unauthorized tool execution, data leakage, and insecure agentic workflow behavior, with explicit focus on PHI/PII exposure. * Design and execute AI red-team exercises targeting LLMs and AI agents including prompt injection (direct and indirect), jailbreaking, tool and memory poisoning, behavioral drift, unsafe autonomy, and emergent privilege escalation. * Analyze agent logic, tool graphs, and multi-step workflows to identify systemic security weaknesses beyond prompt-level attacks; translate findings into reusable attack libraries and actionable engineering fixes. * Build and maintain monitoring, logging, and alerting for AI systems covering prompt behavior, tool invocation patterns, output anomalies, and workflow execution - and implement detection content for policy-violating AI behavior. * Embed security controls into CI/CD pipelines and agentic delivery workflows; partner with AI platform, data engineering, and application teams to integrate security requirements from design through deployment gate. * Apply NIST AI RMF, MITRE ATLAS, and OWASP LLM Top 10 to assess and manage AI security risks; contribute to enterprise AI security standards, reference architectures, and governance policy; advise leadership on AI cybersecurity risk and regulatory considerations specific to healthcare AI deployment. * Other duties as assigned or requested. ## Related Videos - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [The New AI Security Stack: Observe, Detect, Protect](https://www.wearedevelopers.com/videos/100302-the-new-ai-security-stack-observe-detect-protect) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/videos/1015-the-ai-security-survival-guide-practical-advice-for-stressed-out-developers) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [What Industries Outside of AI Are Hiring The Most AI Experts?](https://www.wearedevelopers.com/magazine/98-what-industries-outside-of-ai-are-hiring-the-most-ai-experts) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)