Senior AI Security Engineer II

About this role

Requirements

• Deep experience across AI security, application security, cloud security or security engineering with hands-on exposure to LLMs, RAG systems and AI APIs
• 5+ years experience across security engineering, application security, cloud security, product security, security architecture, penetration testing or red teaming
• Hands-on experience securing or reviewing AI/ML, LLM, RAG or agent-based systems
• Threat modelling capabilities with the ability to translate security risk into practical engineering outcomes
• Experience across web and API security, IAM, secrets management, secure SDLC, cloud security, logging, detection and incident response
• Programming experience with Python or another modern programming language
• Familiarity with LLM architectures, vector databases, embeddings, AI agents and modern AI data flows
• Exposure to frameworks such as OWASP LLM Top 10 and MITRE ATLAS

Responsibilities

• Lead security reviews and threat modelling activities across AI-enabled products, LLM applications, RAG systems, agentic workflows and AI APIs
• Identify and assess AI-specific threats including prompt injection, model abuse, sensitive data disclosure and model or data poisoning risks
• Design and implement secure AI patterns including least-privilege access controls, output validation, audit logging and human approval workflows
• Partner with Engineering teams to embed AI security controls into SDLC, CI/CD, MLOps and LLMOps practices
• Contribute to AI governance frameworks, standards, policies and control mapping activities across the organisation
• Review third-party AI vendors, SaaS AI capabilities and model providers to support secure and compliant adoption
• Help develop AI security tooling, testing approaches and monitoring capabilities to reduce risk before production deployment

Benefits

• Hybrid working flexibility with team connection days in Sydney or Melbourne offices