> Markdown version of [/jobs/ext/1726526-sr-security-engineer-ai](https://www.wearedevelopers.com/jobs/ext/1726526-sr-security-engineer-ai). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Security Engineer (AI)

- **Company:** Hi Marley
- **Location:** Boston, MA, United States
- **Experience:** Expert
- **Salary:** $121,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Ubuntu (Operating System), Cyber Security, Information Leak Prevention, Software Design Patterns, Identity and Access Management, Cloud Services, Data Streaming, Systems Integration, Large Language Models, Multi-Agent Systems, Software Security, AI Platforms, Data Management, Machine Learning Operations, Data Pipelines
- **Published:** July 8, 2026
- **Apply:** https://www.bostonjobsite.com/job.asp?id=3314090455&tx=JJ6155FFL&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 5+ years in security engineering, application security, or infrastructure security, with hands-on exposure to AI/ML systems.
 * Experience securing or building LLM-based systems, agentic frameworks, or ML pipelines in cloud environments.
 * Solid understanding of AI-specific attack surfaces: prompt injection, tool-use exploitation, privilege escalation through inherited access, data poisoning, and model/
training-data
leakage.

 * Hands-on familiarity with how AI systems actually, in Python and experience building security tooling, automation, and testing.
 * Strong working knowledge of AWS security: IAM, networking, container isolation, encryption, and monitoring.
 * Familiarity with compliance frameworks (SOC 2, ISO 27001, ISO 42001, NIST AI RMF) and mapping technical controls to audit requirements.
 * Ability to communicate technical
risk
clearly to engineers, auditors, and stakeholders.

Preferred

 * Experience running or contributing to
AI
red-teaming or adversarial testing.

 * Experience with MCP
s,
agent orchestration frameworks, or similar agentic infrastructure.

 * Background in DLP, monitoring, or observability for AI or cloud workloads.
 * Experience at a growth-stage B2B SaaS company.

## Description

We're looking for a Sr. AI Security Engineer to help secure how we use AI across the company, with a primary focus on Hi Marley's internal AI environment: the tools, agents, and integrations that power how our teams work. Working within the security architecture and frameworks set by our senior security leadership, you'll do the hands-on engineering that makes them real: threat-modeling new AI capabilities, running adversarial testing, operating the agent and MCP connector review process, and producing the evidence that lets leadership, our teams, and our auditors trust how we use AI. This role is for an experienced security engineer with genuine AI/ML depth who wants to go deep on one of the most important emerging problems in the field.

Teamwork and shared enthusiasm are a core part of our culture, which is why this role involves joining us in the Boston office for 2-3 days each week.

What You'll Do:

AI Security Engineering & Threat Modeling

 * Apply Hi Marley's AI security design patterns and reference architectures to LLM integrations, agent frameworks, MCP connectors, and data pipelines across the internal environment.
 * Lead threat modeling for new AI capabilities before they ship,
identifying
architectural risks and driving mitigations into the design phase.

 * Implement and enforce controls for agent isolation, least-privilege execution, credential scoping, and data-boundary enforcement in agentic environments.
 * Maintain a current inventory of AI tools and integrations in use across the organization, tracking data flows, permission scopes, and access controls.
 * Track emerging AI security research, attack techniques, and defensive tooling, and bring relevant findings into our practices.

AI Security Program Execution

 * Run the risk assessment process for internal AI tools, integrations, and third-party model providers against the established
methodology

 * Execute the AI red-teaming cadence
e.g.
a
dversarial testing for prompt injection, data exfiltration, model manipulation, and jailbreaking
and drive remediation.

 * Operate the agent and MCP connector lifecycle, from proposal through approval, deployment, monitoring, and retirement.
 * Own the security evaluation of new AI tool requests, including vendor risk assessments, data-handling reviews, and baseline configuration; surface unapproved tools and bring them under governance.
 * Maintain AI security incident response runbooks and help respond when something goes wrong.
 * Track and report AI security metrics that
demonstrate
program health.

Trust, Compliance & Collaboration

 * Produce compliance evidence and documentation for AI systems supporting SOC 2 Type II examinations and ISO 42001 certification.
 * Translate technical decisions into clear, auditor-ready explanations of what we do, how it works, and why it is safe.
 * Partner with AI Operations and Corporate IT to embed security into the internal AI platform
access controls for inference APIs, isolation for cloud-hosted agentic workloads, and endpoint/DLP configuration.

 * Contribute employee-facing guidance on safe AI use, * Max Courage â?? We encourage our team, our customers, and their customers to dream big, try new ideas, and maximize impact by measuring risk.
 * Be Humble â?? We lead with appreciation and promote a culture of humility, compassion, and openness to learn from anyone, anywhere.
 * Ubuntu ("I am because we are") â?? We believe true success is much bigger than any single individual or company. By aligning our individual aims behind a shared purpose, we can achieve our fullest potential - together.

Life at Hi Marley:

Life at Hi Marley is shaped by collaboration, learning, and genuine connection. We're proud to foster an environment where people can do their best work, feel supported, and grow alongside a team that celebrates both individuality and shared purpose.

 * A fun, lively startup culture that embraces creativity and innovation
 * Core values-based leadership that guides our decision-making and daily interactions
 * A culture of engagement, diversity, inclusion, and belonging - everyone's voice matters
 * Flexible, hybrid work environment that values balance and trust
 * Ample opportunities to learn, take on new challenges, and make an impact in a fast-growing organization
 * Meaningful work that directly supports our mission to help people and organizations communicate with empathy and clarity


## Related Videos

- [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions)
- [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes)
- [This App Reached 10,000 Users in One Week. Here's How.](https://www.wearedevelopers.com/videos/100329-this-app-reached-10-000-users-in-one-week-here-s-how)
- [Coffee with Developers - Maria Apazoglou](https://www.wearedevelopers.com/videos/1209-coffee-with-developers-maria-apazoglou)
- [One AI API to Power Them All](https://www.wearedevelopers.com/videos/1601-one-ai-api-to-power-them-all)
- [From AI Assistance to Agentic Systems: Scaling Sovereign AI in Banking](https://www.wearedevelopers.com/videos/100070-from-ai-assistance-to-agentic-systems-scaling-sovereign-ai-in-banking)

## Related Articles

- [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [MLOps And AI Driven Development](https://www.wearedevelopers.com/magazine/82-mlops-and-ai-driven-development)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)