AI Security Engineer

Carrier is a global provider of intelligent climate and energy solutions. The AI Security Engineer will build, deploy, integrate, automate, and support security controls that protect the company’s artificial intelligence ecosystem, including Microsoft Copilot, Azure AI services, large language model platforms, and machine learning solutions. The role partners with security, cloud, data, platform, and application teams to secure AI platforms, monitor threats, support incident response, and improve AI security operations.

Responsibilities:

• Design, build, deploy, configure, and maintain security controls supporting enterprise AI platforms and services
• Implement technical safeguards for Microsoft Copilot, Azure AI Services, LLM applications, machine learning platforms, and AI-enabled business solutions
• Integrate AI security controls with identity management, data loss prevention, logging, monitoring, cloud access security broker, security service edge, security information and event management, and cloud security platforms
• Develop and maintain AI security automation, workflows, detections, dashboards, reporting, and operational processes
• Build and support monitoring capabilities to detect AI misuse, prompt injection attacks, unauthorized access, sensitive data exposure, and other AI security threats
• Engineer secure implementation patterns for AI application development, model deployment, API integrations, and data ingestion pipelines
• Partner with development and platform teams to implement security requirements throughout the AI lifecycle
• Develop scripts, automations, APIs, and integrations to improve AI security operations and control effectiveness
• Perform technical validation, testing, troubleshooting, tuning, and continuous improvement of AI security controls
• Support incident response, investigations, and remediation activities involving AI technologies and AI-enabled applications
• Deploy and maintain security tooling that supports AI monitoring, data protection, governance, and compliance requirements
• Develop technical documentation, implementation guides, standard operating procedures, and operational runbooks
• Provide advanced engineering support for AI-related cybersecurity issues and service requests

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Data Science, or any other technical discipline; or High school diploma or GED with 4 years of military experience or 1 year of direct AI security experience
• 5+ years of experience implementing or supporting cybersecurity technologies in cloud, application, infrastructure, or security engineering environments
• Must have unrestricted authorization to work in the USA. No visa sponsoring available
• Knowledge of implementing and supporting security controls in Microsoft Azure, AWS, Google Cloud Platform, or comparable cloud environments
• Proficiency with securing Microsoft Copilot, Azure AI Services, Azure OpenAI, Microsoft Purview, Microsoft Defender, Microsoft Sentinel, or related Microsoft technologies
• Familiarity with data loss prevention (DLP), cloud access security broker (CASB), security service edge (SSE), security information and event management (SIEM), endpoint detection and response (EDR), identity, and cloud-native security controls
• Capability to develop and automate solutions using Python, PowerShell, C#, Terraform, or comparable scripting and infrastructure-as-code technologies
• Knowledge of integrating security controls into AI applications, APIs, data pipelines, development workflows, and AI-enabled systems
• Understanding of generative AI, machine learning platforms, large language models (LLMs), retrieval-augmented generation (RAG), AI application architectures, and applicable AI security and governance frameworks, including NIST AI RMF, MITRE ATLAS, and ISO 42001
• Relevant certifications such as CISSP, CCSP, Azure Security Engineer, Security+, Microsoft AI certifications, or equivalent credentials; familiarity with enterprise security technologies, monitoring, incident response, identity and access management, data protection, network security, and application security practices