AI Security Specialist

The AI Security Specialist will work within the Cyber Risk team in the Inormation Security organization. 

The Work

• Support the team by performing basic security reviews of AI prompts, skills, agents, and other related inputs. This includes helping review prompt-based systems, simple agent workflows, and early-stage automation tools.
• Assist in checking compliance with internal AI security, Responsible AI, and data protection requirements by using established frameworks, checklists, and outputs from AI testing tools.
• Document review results clearly, noting areas of concern and drafting initial mitigation suggestions for review by senior team members.
• Contribute to continuous improvement by updating team documentation, improving reusable scripts under guidance, and assisting in refining security review criteria.

What you need

• US Citizen
• Bachelor’s Degree in Information Technology, Information Security, Business or Risk Management (or equivalent experience)
• 3+ year of Risk Management, Security Assessment, or a related field.
• Basic understanding of GenAI ecosystems, including LLMs, vector databases, prompt frameworks, and simple agent workflows.
• Awareness of common AI-specific attack vectors such as prompt injection, data leakage, model inversion, and unsafe agent actions.
• Familiarity with fundamental AI security testing tools and evaluation frameworks, with willingness to learn more advanced tools over time.
• Ability to identify basic AI system issues such as hallucinations, unauthorized access attempts, or harmful outputs.
• Understanding of core cloud security concepts across Azure/AWS/GCP, focused on identity, logging, and boundary protections.
• Ability to review AI prompt inputs, configuration settings, guardrails, and simple testing outputs with guidance from senior staff.
• Basic scripting ability (Python, JS, or similar) to help build or update small test cases and simple automation scripts.
• Ability to apply AI security and Responsible AI requirements using checklists, templates, and system documentation provided by senior team members.
• Solid communication and writing skills to help document and share test results, findings, and recommended mitigations in a clear and structured format.
• Ability to communicate observed issues to engineers and product teams under the guidance of senior reviewers.
• Ability to explain basic AI security concerns in plain language.
• Ability to work independently and as part of a high-performing team.
• Ability to continuously improve skills and staying current with changes in AI models, platforms, and emerging threats—tracking updates and integrating them into test coverage.
• Experience contributing to updates of AI security patterns, guidance, and internal testing frameworks.