Security Engineer

We are seeking a Security Engineer who possesses expertise in cloud environments and a strong focus on securing AI/LLM deployments. You will be part of a team that protects system boundaries, keeps computer systems and network services hardened against attacks, and secures sensitive data. You will collaborate closely with our team to ensure that our products, cloud environments, and AI integrations are built to industry security standards and best practices., * Assess and secure AI/LLM deployments and integrations - including Model Context Protocol (MCP) and other LLM connector requests - through threat modeling, guardrail design, and risk assessment prior to approval

• Perform daily security monitoring across cloud and infrastructure, spanning cloud security posture management (CSPM), SIEM and log analysis, cloud-native threat detection, database activity monitoring, and security orchestration, automation, and response (SOAR)
• Leverage SIEM tooling for real-time analysis of security alerts generated by our cloud infrastructure and applications
• Own the security of our entire AWS and GCP environments - including IAM, compute, storage, networking, and workload configurations - hardening the footprint, enforcing baselines, and remediating misconfigurations and vulnerabilities across both clouds
• Participate in incident management, change management, security policy management, and security incident response
• Contribute to SOC 2, PCI DSS, and ISO 27001 compliance programs

• Bachelor’s degree in Computer Science, Information Security, or a related technical field
• 5+ years of security engineering experience, including at least 2 years focused specifically on AI/ML security
• Hands-on experience securing AWS and GCP environments, including core services such as IAM, EC2, S3, VPC, and their GCP equivalents (IAM, Compute Engine, Cloud Storage, VPC)
• Experience with CSPM for continuous detection and remediation of cloud misconfigurations
• Experience securing AI/LLM deployments in cloud environments - including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls
• Hands-on assessment of MCP and LLM connector integrations against OWASP guidance - covering prompt injection, cross-connector chaining, OAuth scope minimization, tool-access boundaries, and untrusted-content handling
• Working knowledge of AI security frameworks and standards: NIST AI RMF, OWASP LLM Top 10, OWASP guidance for MCP and agentic systems, and MITRE ATLAS
• Ability to threat-model and risk-assess AI systems, agentic workflows, and third-party AI integrations prior to approval
• Understanding of core security concepts - cryptography, authentication, authorization, security protocols, and vulnerability classes - as applied to web application and cloud service security
• Deep technical understanding of common security vulnerabilities and risks, along with countermeasures and compensating controls
• Solid grasp of IP networking protocols: IPv4/IPv6, TCP/UDP, DHCP, HTTPS, FTP, and similar, Access Authorization, Amazon Elastic Compute Cloud (EC2), Amazon Simple Storage Service (S3), Amazon Web Services (AWS), Analysis Skills, Artificial Intelligence (AI), Authentication, Automation, Best Practices, Big Data, Business Case, Change Management, Cloud Applications, Cloud Computing, Cloud Storage, Computer Networks, Computer Science, Computer Security, Computer Systems, Cost Control, Cryptography, DHCP (Dynamic Host Configuration Protocol), Engineering, FTP (File Transfer Protocol), Fortune 500 Customers, GCP (Good Clinical Practices), HTTPS (HyperText Transport Protocol Secure), IP (Internet Protocol), IPv4, IPv6, ISO (International Organization for Standardization), Incident Management, Incident Response, Industry Standards, Information/Data Security (InfoSec), Injections, Input/Output, Internet Application, MCP - Microsoft Certified Professional, Machine Learning, Machine Tool, Money Laundering, Network Configuration Management, OAuth, PCI-DSS, Risk, Risk Analysis, Security Analysis, Security Information and Event Management (SIEM), Security Infrastructure, Security Monitoring, Security Policy, Security Protocols, Software Engineering, Software as a Service (SaaS), Systems Analysis, TCP (Transmission Control Protocol), Team Player, Threat Modeling, Total Cost of Ownership, U.S. National Institute of Standards and Technology (NIST), UDP (User Datagram Protocol), Use Cases

• Salary ranges between USD 120,000 -150,000 /year
• Total compensation includes base salary, performance bonuses, and equity options.
• Comprehensive medical, dental, and vision insurance coverage.
• 401(k) retirement savings plan available.
• Discretionary paid time Off (DTO) plus paid holidays.

DataVisor is the world’s leading AI-powered Fraud and Risk Platform that delivers the best overall detection coverage in the industry. With an open SaaS platform that supports easy consolidation and enrichment of any data, DataVisor’s solution scales infinitely and enables organizations to act on fast-evolving fraud and money laundering activities in real time. Its patented unsupervised machine learning technology, advanced device intelligence, powerful decision engine and investigation tools work together to provide guaranteed performance lift from day one. DataVisor’s platform is architected to support multiple use cases across different business units flexibly, dramatically lowering the total cost of ownership, compared to legacy point solutions. DataVisor is recognized as an industry leader and has been adopted by many Fortune 500 companies across the globe.

Our award-winning software platform is powered by a team of world-class experts in big data, machine learning, security, and scalable infrastructure. Our culture is open, positive, collaborative, and results driven. Come join us!