Senior Security Engineer, AI Solutions

As of October 16th, a well-established law firm is seeking a Senior Security Engineer, AI Solutions to partner with the Firm’s AI & Innovation, IT, and Information Security teams to ensure the secure design, development, and deployment of AI-powered tools and platforms. This role will be responsible for, n \n

• Partnering with AI, IT, and Information Security teams to assess AI solutions, identify risks, and recommend secure implementation strategies. \n

• Conducting security assessments of AI vendors and third-party products, including reviewing architectures, security controls, and compliance documentation. \n

• Designing and reviewing secure architectures for AI applications, agents, APIs, cloud services, and enterprise integrations. \n

• Performing application security reviews, to identify vulnerabilities and data exposure risks. \n

• Establishing security controls, access permissions, monitoring, and safeguards to address AI-specific risks, including prompt injection and unauthorized data access. \n

• Translating firm, client, and regulatory requirements into practical security controls and recommendations. \n

• Advising firm leadership and stakeholders on AI security risks, mitigation strategies, and emerging technologies. \n

• 7+ years of experience in security engineering, architecture, application security, cloud security, or a related field. \n

• Strong understanding of LLMs, RAG, agentic AI, AI security risks, and relevant mitigation strategies. \n

• Experience with cloud security (AWS preferred), SaaS platforms, APIs, secure SDLC, threat modeling, vulnerability management, and source code review. \n

• Knowledge of OWASP Top 10, OWASP Top 10 for LLMs, IAM, data protection, networking, and secure coding principles. \n

• Experience assessing third-party vendors and reviewing security documentation, including SOC 2 reports, ISO certifications, and penetration test results. \n

• Strong communication skills and the ability to translate technical risks into actionable recommendations. \n

• Bachelor’s or master’s degree in a relevant technical field preferred; equivalent experience considered. \n

• CISSP, CCSP, CISM, or similar certifications preferred. \n

• Law firm or professional services experience preferred.