AI Product Owner — Senior Security Engineer

Diverse Lynx is the employer for this role. The AI Product Owner — Senior Security Engineer will build and maintain AI/ML security tooling, implement controls for AI pipelines, integrate AI risk signals with security platforms, and conduct automated testing and red teaming. The role also collaborates across engineering teams to embed secure-by-design practices and document AI security standards.

Responsibilities:

• Design, build, and maintain tooling for AI/ML asset discovery, model inventory, and shadow-AI detection across the enterprise
• Implement security controls for AI pipelines, including data protection, access control, secrets management, and secure model deployment (MLOps/LLMOps security)
• Integrate AI risk signals (e.g., prompt injection attempts, data exfiltration via AI tools, anomalous model behavior) into existing SIEM/SOAR and monitoring platforms
• Build automated testing and red-teaming harnesses for AI applications (adversarial testing, jailbreak/prompt-injection testing, data leakage testing)
• Support secure integration of third-party and internally built AI/LLM services (API gateways, guardrail middleware, output filtering)
• Collaborate with data science, platform engineering, and application teams to embed security requirements into the AI development lifecycle (secure-by-design, CI/CD gates)
• Document control implementations, runbooks, and technical standards for AI security engineering

Requirements:

• 3+ years in security engineering, cloud engineering, or ML engineering, with direct hands-on exposure to AI/ML or LLM-based systems
• Proficiency in Python and experience with ML/LLM frameworks (e.g., LanEligible to workhain, Hugging Face, TensorFlow/PyTorch) or AI security tooling (e.g., guardrail frameworks, model scanning tools)
• Working knowledge of cloud platforms (Azure and/or AWS/Eligible to workP) and cloud-native security controls (IAM, network segmentation, key/secrets management)
• Familiarity with AI-specific threat models: prompt injection, model inversion, data poisoning, insecure output handling, excessive agency (OWASP Top 10 for LLM Applications)
• Experience with CI/CD pipelines, infrastructure-as-code, and integrating security tooling into automated pipelines
• Experience with SIEM/SOAR platforms (Splunk, Sentinel, etc.) and scripting integrations
• Security certifications (Security+, Eligible to workIH, OSCP) or cloud certifications (AWS/Azure Security)