Senior AI Security Engineer

Highmark Health is focused on securing AI/ML and Generative AI systems across the enterprise. The Senior AI Security Engineer will design, implement, and operate security controls while advising on emerging AI threats and regulatory exposure.

Responsibilities:

• Design, implement, and operate security controls for AI/ML, GenAI, and agentic systems — spanning model-level, data-level, and platform-level protections across Azure, GCP, AWS, and SaaS
• Engineer and enforce guardrails that mitigate prompt injection, unsafe outputs, unauthorized tool execution, data leakage, and insecure agentic workflow behavior, with explicit focus on PHI/PII exposure
• Design and execute AI red-team exercises targeting LLMs and AI agents including prompt injection (direct and indirect), jailbreaking, tool and memory poisoning, behavioral drift, unsafe autonomy, and emergent privilege escalation
• Analyze agent logic, tool graphs, and multi-step workflows to identify systemic security weaknesses beyond prompt-level attacks; translate findings into reusable attack libraries and actionable engineering fixes
• Build and maintain monitoring, logging, and alerting for AI systems covering prompt behavior, tool invocation patterns, output anomalies, and workflow execution — and implement detection content for policy-violating AI behavior
• Embed security controls into CI/CD pipelines and agentic delivery workflows; partner with AI platform, data engineering, and application teams to integrate security requirements from design through deployment gate
• Apply NIST AI RMF, MITRE ATLAS, and OWASP LLM Top 10 to assess and manage AI security risks; contribute to enterprise AI security standards, reference architectures, and governance policy; advise leadership on AI cybersecurity risk and regulatory considerations specific to healthcare AI deployment
• Other duties as assigned or requested

Requirements:

• 5 years of experience in Cybersecurity engineering, application security, or platform security
• 3 years of experience in AI/ML or Generative AI security (prompt injection defense, unsafe output handling, tool-use abuse, data leakage)
• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or closely related discipline or relevant experience and/or education as determined by the company in lieu of bachelor's degree
• 5 years of experience in Securing production systems in enterprise environments
• 3 years of experience in Hybrid multi-cloud security (Azure, GCP, AWS)
• 2 years of experience in Detection engineering, monitoring, and alerting for complex application or workflow environments
• 2 years of experience in AI red-team execution (jailbreaking, behavioral drift, misuse-case validation; tools such as PyRIT, Promptfoo, AgentDojo)
• 2 years of experience in Securing agentic systems, multi-step AI workflows, or tool-calling architectures
• 2 years of experience in Highly regulated industry (healthcare, financial services) with HIPAA or equivalent compliance obligations
• 1 year of experience in Identity, access management, secrets handling, and runtime policy enforcement for AI workloads
• Master's degree in Cybersecurity, Computer Science, or a related field
• Certified Information Security Professional (CISSP)
• AWS Certified Security Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer
• AI security credentials or coursework (SANS AI Security, NIST AI RMF practitioner training)