AI Security Engineer

The AI Engineer will help monitor and respond to how AI tools, agents, and connectors are used across the organization. Working with the Infrastructure Applications Support Manager within Digital Innovation and Technology (DigIT), and in close partnership with Security, this role will design and implement monitoring, alerting, and response capabilities using Microsoft Defender and other enterprise security tools. Scope includes enterprise AI tools such as Microsoft 365 Copilot, ChatGPT EDU, and Box AI, as well as AI agents, third-party connectors, and Model Context Protocol (MCP) connections. This is a remote, six-month contract engagement subject to extension should the demand exist., AI Usage Visibility and Discovery · Assess current security tools and configuration to identify AI monitoring gaps and what is needed to close them. · Configure cloud access security broker (CASB) and related capabilities to discover and classify sanctioned and unsanctioned AI applications, model providers, and MCP servers. · Establish usage baselines for approved enterprise AI tools to identify unusual activity. · Use data loss prevention and data security capabilities to identify sensitive data flowing into AI tools.

Agents, Connectors, and MCP Connections · Inventory AI agents, OAuth-connected apps, connectors, and MCP connections that touch data, including owner, permissions, and approval status. · Develop policies and alerts for high-risk patterns such as over-permissioned connectors, unapproved third-party AI apps, and personal AI accounts connecting to data. · Monitor AI agents for risky configurations, data access, and behavior, in line with the Agentic AI Guardrails.

Detection, Alerting, and Response · Develop detections, alerts, and hunting queries for AI-related risks such as data exfiltration, prompt injection, and anomalous agent activity. · Integrate audit and usage logs from enterprise AI platforms, where feasible, to centralize monitoring. · Partner with Security on triage and response runbooks defining severity, escalation, and actions per alert type. · Design monitoring that respects privacy requirements, including the Electronic Communications Policy, by favoring risk signals and metadata over content review.

Request Research, Risk Documentation, and Reporting · Research incoming requests for new AI tools, agents, connectors, and MCP servers, assess security risks, and recommend approval conditions. · Document risks, controls, and recommended practices aligned with the AI Acceptable Use Standard, the Agentic AI Guardrails, and UC policy IS-3. · Report on AI usage, risk trends, and open issues for security, program, and leadership audiences.

• LinkedIn with a picture
• 5 or more years of security engineering, security operations, or cloud security experience in an enterprise environment.
• Hands-on experience with CASB, SIEM, and data loss prevention tools, including app discovery, policies, and alerts.
• Experience writing detection and hunting queries, and scripting (for example, Python or PowerShell) for automation, log analysis, and API integrations.
• Working knowledge of identity and access management, including OAuth consent, application permissions, and service accounts.
• Understanding of AI security risks such as data leakage, prompt injection, over-permissioned agents and connectors, and shadow AI., · Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience. · 5 or more years of security engineering, security operations, or cloud security experience in an enterprise environment. · Hands-on experience with CASB, SIEM, and data loss prevention tools, including app discovery, policies, and alerts. · Experience writing detection and hunting queries, and scripting (for example, Python or PowerShell) for automation, log analysis, and API integrations. · Working knowledge of identity and access management, including OAuth consent, application permissions, and service accounts. · Understanding of AI security risks such as data leakage, prompt injection, over-permissioned agents and connectors, and shadow AI. · Strong written communication skills, including documenting risks, controls, and runbooks for varied audiences. · Ability to work independently and collaboratively in a remote, cross-functional environment.

InterSources Inc, a Certified Diverse Supplier, was founded in 2007 and offers innovative solutions to help clients with Digital Transformations across various domains and industries. Our history spans over 19 years and today we are an Award-Winning Global Software Consultancy solving complex problems with technology. We recognize that our employees and our clients are our strengths as the diverse talents and opportunities they bring to the table enable us to grow as a global platform and they are causally linked with our success. We provide strategic and technical advice, and we have expertise in areas covering Artificial Intelligence, Cloud Migration, Custom Software Development, Data Analytics Infrastructure & Cloud Solutions, Cyber Security Services, etc. We make reasonable accommodations for clients and employees and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud partner company. We align strategy with execution and provide secure service solutions by developing and using the latest technologies that thrive our resources to deliver industry-leading capabilities to our clients and customers, making it convenient for our clients to do business with InterSources Inc. Our teams also drive growth by refining technology-driven client experiences that put the users first, providing an unparalleled experience. This results in strengthening the core technologies of clients, enabling them to scale with flexibility, create seamless digital experiences and build lifelong relationships.