Senior Security Engineer, AI Solutions

As of October 16th, a well-established law firm is seeking a Senior Security Engineer, AI Solutions to partner with the Firm’s AI & Innovation, IT, and Information Security teams to ensure the secure design, development, and deployment of AI-powered tools and platforms. This role will be responsible for:

Responsibilities:

• Partnering with AI, IT, and Information Security teams to assess AI solutions, identify risks, and recommend secure implementation strategies.
• Conducting security assessments of AI vendors and third-party products, including reviewing architectures, security controls, and compliance documentation.
• Designing and reviewing secure architectures for AI applications, agents, APIs, cloud services, and enterprise integrations.
• Performing application security reviews, to identify vulnerabilities and data exposure risks.
• Establishing security controls, access permissions, monitoring, and safeguards to address AI-specific risks, including prompt injection and unauthorized data access.
• Translating firm, client, and regulatory requirements into practical security controls and recommendations.
• Advising firm leadership and stakeholders on AI security risks, mitigation strategies, and emerging technologies.

Qualifications:

• 7+ years of experience in security engineering, architecture, application security, cloud security, or a related field.
• Strong understanding of LLMs, RAG, agentic AI, AI security risks, and relevant mitigation strategies.
• Experience with cloud security (AWS preferred), SaaS platforms, APIs, secure SDLC, threat modeling, vulnerability management, and source code review.
• Knowledge of OWASP Top 10, OWASP Top 10 for LLMs, IAM, data protection, networking, and secure coding principles.
• Experience assessing third-party vendors and reviewing security documentation, including SOC 2 reports, ISO certifications, and penetration test results.
• Strong communication skills and the ability to translate technical risks into actionable recommendations.
• Bachelor’s or master’s degree in a relevant technical field preferred; equivalent experience considered.
• CISSP, CCSP, CISM, or similar certifications preferred.
• Law firm or professional services experience preferred.