security engineer for AI systems

Описание

Fortegra provides insurance services and safeguards organizational data, applications, infrastructure, and AI systems across on-premises, cloud, and SaaS environments.

Задачи

Monitor and tune SIEM, EDR/XDR, SOAR, email security, DLP, and CSPM solutions; Lead investigations into escalated security incidents, including triage, forensic analysis, containment, eradication, and recovery; Develop and maintain detections aligned with MITRE ATT&CK and the organization’s threat model; Conduct tabletop exercises, purple-team engagements, and incident management drills; Maintain incident response runbooks and playbooks; Lead vulnerability remediation across endpoints, servers, cloud workloads, containers, and SaaS applications; Design and execute vulnerability assessments, penetration tests, red‑team exercises, and security audits; Maintain hardened security baselines for workstations, servers, cloud resources, containers, and network devices; Consume and operationalize threat intelligence; Design, implement, and review cloud security controls; Advance the organization’s Zero Trust strategy; Review Infrastructure-as-Code manifests and maintain policy‑as‑code guardrails; Partner with IT and identity teams on IAM, SSO, MFA, privileged access management, and conditional access policies; Enforce secure coding practices and deliver annual secure‑development training; Integrate and tune security testing in CI/CD pipelines; Establish and maintain software supply chain controls, including SBOM generation and dependency review; Lead threat‑modeling sessions for new products, services, and AI‑enabled features; Define and enforce policies for the safe adoption and use of AI tools; Assess and mitigate AI/ML security risks; Apply AI security frameworks when evaluating vendors, internal AI products, and AI‑generated code; Review AI‑generated code for security vulnerabilities and licensing issues; Partner with Legal, Privacy, and Engineering on AI data handling, retention, and disclosure practices; Evaluate and deploy AI‑assisted security tooling; Build lightweight automations and scripts to streamline security workflows; Validate the accuracy and safety of AI‑driven security tooling and document its operating envelope; Prepare for and respond to internal and external IT audits and risk assessments; Recommend and assist with deploying, integrating, and configuring security solutions; Maintain current knowledge of security threats, defensive tooling, and AI‑related risks; Provide periodic on‑call support for security incidents; Perform other assigned duties.

Требования

Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent professional experience; 4+ Years of experience in information security, security engineering, or a closely related role; Experience with cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, and MITRE ATT&CK; Hands‑on experience securing AWS, Azure, or GCP environments; Experience with vulnerability management, patching, and remediation across servers, endpoints, containers, and cloud workloads; Experience integrating security into CI/CD pipelines; Incident response experience covering triage, containment, eradication, recovery, and post‑incident review; Familiarity with AI/LLM security concepts and related frameworks; Hands‑on experience with SIEM, EDR/XDR, SOAR, WAF, CSPM/CNAPP, vulnerability management, DLP, email security, and identity‑centric controls; Working knowledge of cloud‑native and container security; Experience with Python, PowerShell, Bash, or Go; Familiarity with secure software development, CI/CD security, and software supply chain risk; Working knowledge of IAM concepts including SSO, MFA, PAM, and Zero Trust; Awareness of AI/LLM security risks and responsible use of AI tooling; Working knowledge of laws and regulations related to security, data privacy, and AI; Strong analytical, communication, and documentation skills, with the ability to explain technical risk to non‑technical stakeholders; Nice to have: CISSP, CCSP, Security+, CISM, GIAC, OSCP, AI/ML security credentials.

Условия

€65,000 - €110,000 Base salary, commensurate with experience; Full benefit package including medical, dental, life, vision, company paid short/long term disability, 401(k), tuition assistance and more; Periodic on‑call support is required.

#J-18808-Ljbffr