ai security engineer

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
***This role is 5 days a week in the Charlotte Office*** 
 
The AI Security Engineer helps design, implement, test, and operate the controls that keep enterprise AI systems safe, governed, and production-ready.
 
 
This role focuses on the security engineering foundations required for AI-enabled applications, agents, prompt-driven workflows, and tool-integrated automations operating in a regulated enterprise environment.
 
 
This is a hands-on engineering role within the Forge AI Security &amp; Governance model.
 
 
The engineer supports guardrail implementation, prompt-injection defense, output filtering, monitoring, secure tool-use boundaries, logging, detection content, and deployment-readiness controls for AI-enabled systems.
 
 
The work spans design, testing, automation, detection engineering, and operational support across the AI delivery lifecycle.
 
 
Daily work includes implementing security controls for AI and agentic systems, validating configurations, supporting adversarial test preparation, building monitoring logic, partnering with engineering to harden prompt and tool behaviors, documenting controls, and ensuring AI solutions meet enterprise safety, traceability, and governance requirements before and after deployment.
 
 
***For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)***
ESSENTIAL DUTIES AND RESPONSIBILITIES 
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.<ul><li>
Implement and maintain security controls for AI-enabled applications, agents, prompts, and workflow automations, including input validation, output filtering, access controls, and governed tool-use restrictions.</li><li>
Support development and operationalization of AI guardrails that reduce risk from prompt injection, unsafe responses, unauthorized tool execution, data leakage, and insecure workflow behavior.</li><li>
Assist with adversarial and misuse-oriented testing activities by preparing scenarios, validating defenses, capturing findings, and supporting remediation with engineering teams.</li><li>
Build and maintain monitoring and alerting logic for AI or agentic systems, including suspicious prompt patterns, abnormal workflow behavior, anomalous tool invocation, or policy-violating output patterns.</li><li>
Contribute to runtime safety patterns such as content filters, role/permission boundaries, logging, evidence capture, and traceability controls required for secure deployment and audit readiness.</li><li>
Partner with product and engineering teams to embed AI security expectations into design reviews, acceptance criteria, test plans, and deployment gates from the beginning of the delivery cycle.</li><li>
Validate that AI-enabled solutions meet required security and governance standards before release, including deployment gate criteria, control validation, and documentation completeness.</li><li>
Support incident investigation and remediation for AI-related control failures, suspicious behavior, or production observations that indicate safety or security degradation.</li><li>
Help maintain control documentation, implementation notes, runbooks, remediation evidence, and operating procedures for AI security engineering activities.</li><li>
Collaborate with AI quality, QA, platform, data, and security teams to ensure safe, resilient, and observable AI solutions across development and production environments.</li><li>
Continuously improve automation, guardrail logic, validation workflows, and monitoring content as AI capabilities, workflows, and attack patterns evolve.</li></ul>
QUALIFICATIONS 
Required Qualifications: 
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Bachelor&rsquo;s degree and equivalent combination of advanced education and experience, which could include any combination of 8 years of experience in IT software engineering, 5 years&rsquo; relevant business experience (i.e. making technical-related decisions on the business side), 5 years&rsquo; experience in project management, and at least 2 years of management experience</li><li>
Broad and in-depth knowledge of technology trends, competitive environment, regulatory requirements and trends, and IT strategies employed to continually meet the demands of clients and regulators</li><li>
Ability to translate enterprise level strategic planning information into software and data management needs, create business plans, and turn them into effective business solutions</li><li>
Executive level communications skills, including, strong negotiation/facilitation/presentation skills and experience negotiating with vendors for relevant products and services</li><li>
Ability to lead projects of significant complexity and risk exposure, particularly with enterprise-wide implications</li><li>
Ability to exercise judgment in solving technical, operational, and organizational challenges in the context of complex business objectives and priorities</li><li>
Ability to lead and manage the performance of multiple teams against a set of financial and operational objectives</li></ul>
Additional Requirements:<ul><li>
3+ years of experience in security engineering, cybersecurity operations, application security, or a closely related technical discipline.</li><li>
Hands-on experience implementing technical controls for enterprise software, APIs, cloud-native services, or automation workflows.</li><li>
Working knowledge of AI/LLM security concepts such as prompt injection, unsafe output handling, tool-use abuse, sensitive data exposure, and control boundary enforcement.</li><li>
Experience with logging, alerting, monitoring, or detection content for identifying suspicious or policy-violating behavior in applications or workflows.</li><li>
Understanding of access control, identity boundaries, secrets handling, secure integration design, and environment-based deployment controls.</li><li>
Ability to work with engineering teams to translate security concerns into implementable guardrails, validations, and release controls.</li><li>
Strong written documentation and communication skills, especially for controls, findings, remediation evidence, and technical guidance.</li><li>
Experience operating within enterprise governance, security, and release-management practices where evidence-based deployment readiness matters.</li></ul><div>
PREFERRED QUALIFICATIONS<ul><li>
Experience with AI or agentic security controls, prompt and output protection strategies, or security validation of LLM-enabled features.</li><li>
Experience with Microsoft, Azure, Copilot / Copilot Studio, or AI-enabled enterprise workflow platforms.</li><li>
Experience with adversarial testing, red teaming support, detection engineering, or misuse-case validation for AI-enabled systems.</li><li>
Experience in financial services, cybersecurity, regulated enterprise environments, or platforms with high audit and control requirements.</li><li>
Familiarity with secure tool-calling patterns, API protections, model or prompt change validation, and runtime traceability for AI systems.</li><li>
Working knowledge of cloud-native security patterns, telemetry analysis, and deployment gating for modern engineering teams.</li></ul></div>
OTHER JOB REQUIREMENTS / WORKING CONDITIONS
Visual / Audio / Speaking
Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.
Manual Dexterity / Keyboarding
Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.
Availability
Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.
Travel
Up to 50%
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

AI Security Engineer

7-Eleven

<div><div><h1 class="jobSectionHeader">Sr AI Security Engineer</h1>
<div>
</div>Job ID R26_2184 Address 3200 Hackberry Road, Irving, Texas, 75063, United States Location Irving, Texas
</div><div><div><div>7-Eleven is an iconic family of brands with over 86,000 locations, surpassing every retailer in the world. We revolutionize convenience, restaurants and fuel through cutting edge innovation &mdash; working hard to be the customer's first choice. 7-Eleven empowers our employees to &quot;activate awesome&quot; and make a meaningful impact in their stores and communities every day. If you're ready to grow, lead and make a difference, come join our team and help shape the future of convenience.
Role Summary 
You design, build, and run security controls for artificial intelligence systems across the full lifecycle. You secure model development, training data, pipelines, APIs, and AI-enabled applications. You work with product, engineering, data science, and compliance teams to reduce exposure from model misuse, data leakage, supply chain threats, and adversarial attacks. You deliver measurable improvements in AI governance, detection, and incident response.
Key Responsibilities
Secure the AI and ML lifecycle<ul><li>
Define security requirements for model development, training, evaluation, deployment, and monitoring</li><li>
Threat model AI systems and AI features in products, including abuse cases and misuse scenarios</li><li>
Establish secure-by-design patterns for model endpoints, prompts, RAG pipelines, and agent workflows</li><li>
Validate controls for model access, rate limiting, tenant isolation, and secrets management</li></ul>
Protect data used by AI<ul><li>
Classify and control training data, fine-tuning data, prompts, and retrieved context</li><li>
Implement guardrails for sensitive data exposure, including PII and PCI data</li><li>
Define retention, deletion, and lineage requirements for AI datasets and outputs</li><li>
Partner with Privacy and Legal on data handling, regulatory expectations, and third-party data use</li></ul>
Secure AI infrastructure and supply chain<ul><li>
Harden AI platforms, GPU and container workloads, model registries, and artifact stores</li><li>
Assess risks in third-party models, libraries, embeddings, and model hosting services</li><li>
Define integrity controls for model artifacts, evaluation sets, and pipeline automation</li><li>
Build CI and CD checks for AI assets, including scanning, signing, and policy enforcement</li></ul>
Detection, monitoring, and response for AI threats<ul><li>
Build logging standards for model requests, responses, tool calls, and retrieval events</li><li>
Create detections for prompt injection, data exfiltration attempts, model extraction signals, and anomalous usage</li><li>
Develop incident response playbooks for AI events, including containment and rollback plans</li><li>
Run security testing for AI features, including red teaming and structured adversarial testing</li></ul>
Governance and program delivery<ul><li>
Create practical AI security standards, patterns, and reference architectures</li><li>
Define KPIs such as reduction in sensitive output leakage, time to detect misuse, and policy coverage</li><li>
Lead risk reviews for new AI features and vendor assessments for AI services</li><li>
Train engineering and data science teams on secure AI patterns and common attack paths</li></ul>
Tools and Technologies You Might Use<ul><li>
Cloud: AWS, Azure, GCP</li><li>
Containers: Kubernetes, Docker</li><li>
DevSecOps: GitHub Actions, GitLab CI, Azure DevOps, Terraform</li><li>
Security: SIEM, EDR, WAF, API gateways, secrets managers</li><li>
AI stack: model gateways, vector databases, model registries, ML pipelines</li></ul>
Examples of Work and Technical Scope<ul><li>
Secure an LLM gateway with authentication, authorization, quotas, content filtering, and audit logging</li><li>
Add prompt injection defenses for an agent that uses tools like web search and internal APIs</li><li>
Implement retrieval filtering, context redaction, and output scanning for a RAG application</li><li>
Build model artifact signing and verification into the release pipeline</li><li>
Create detections in SIEM for abnormal model usage, including model scraping patterns</li></ul>
Required Qualifications<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Artificial Intelligence, Computer Science, or related highly technical field</li><li>
5+ years in security engineering, application security, cloud security, or detection engineering</li><li>
Experience securing LLM-based applications, RAG systems, or agentic workflows</li><li>
Familiarity with adversarial ML concepts, such as prompt injection, model inversion, and model extraction</li><li>
Experience with one or more cloud platforms, AWS, Azure, or GCP</li><li>
Experience with Kubernetes and container security</li><li>
Hands-on experience with at least one programming language, Python preferred</li><li>
Strong understanding of AI, LLMs, API security, identity, secrets management, and cloud controls</li><li>
Experience building security controls into CI and CD pipelines</li><li>
Proven ability to lead cross-functional security work with engineering and product teams</li><li>
Effectively communicate complex technical concepts to both technical and non-technical stakeholders</li><li>
Effectively communicate to leadership and know when to escalate with proactive, clear, data-driven insight, highlighting risks, roadblocks, and solutions</li><li>
Proven leadership capabilities with the ability to influence and drive change</li></ul>
Preferred Qualifications<ul><li>
Master&rsquo;s degree in Cybersecurity, Artificial Intelligence, Computer Science, or related highly technical field</li><li>
AI/ML certifications (e.g., Microsoft Azure AI Engineer, AWS ML Specialty, GIAC Machine Learning Engineer, ISC2 Building AI Strategy)</li><li>
Experience with security telemetry and detections in SIEM or EDR platforms</li></ul>
If an hourly or salary range is included in this ad it represents the range 7-Eleven in good faith believes is the range of compensation for this role at the time of this posting. The Company may ultimately pay more or less than the posted range. This range is only applicable for jobs to be performed in this state. This range may be modified in the future. No amount is considered to be wages or compensation until such amount is earned, vested, and determinable under the terms and conditions of the applicable policies and plans. The amount and availability of any bonus, commission, long-term incentive compensation, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</div></div></div></div>

Sr AI Security Engineer

Microsoft

<div>
 
 Overview
 
 
 
 The
 
 Copilot Security Team
 
 is chartered with securing Microsoft&rsquo;s agentic and autonomous AI systems. We build the adversarial testing, mitigations, telemetry, guardrails, and evaluation capabilities that reduce real‑world risk across Copilot and emerging AI agents. Our mission:
 
 increase safety, resilience, and trustworthiness by proactively identifying weaknesses and engineering durable defenses at scale.
 
 
 
 As a
 
 Software Engineer (IC3)
 
 , you will design and implement foundational components that harden Copilot&rsquo;s agentic systems against jailbreaks, prompt injection, toolchain misuse, unsafe autonomy, and other emerging XPIA‑class attack vectors. You will contribute to both
 
 adversarial evaluations
 
 and the
 
 Agentic Security Platform
 
 &mdash;the shared services, pipelines, and instrumentation that enable reproducible, auditable security evaluation across Microsoft.
 
 
 This role is ideal for engineers who are passionate about secure-by-design engineering, love building well‑constructed systems, and want to help define the future of responsible AI.
 
 
 
 Why Join the Copilot Security Team?
 
 
 
 Join a team at the center of Microsoft&rsquo;s most critical AI safety work. You will build systems that shape how Copilot&mdash;and future autonomous AI&mdash;behave in the world. Your work will directly reduce real‑world risk, improve product safety, and influence Microsoft-wide engineering standards for agentic AI.
 
 
 Microsoft&rsquo;s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
 
 
 
 Responsibilities
 
 
 
 
 Core Engineering
 
 
 
 <ul>
 <li>
 Design, build, and maintain high‑quality services and libraries that support adversarial testing, security evaluations, and risk measurement for agentic and autonomous AI systems.
 </li>
 <li>
 Implement adversarial test harnesses (e.g., jailbreak, prompt injection, toolchain misuse) and integrate them into shared evaluation pipelines such as SEVAL/CARES.
 </li>
 <li>
 Develop telemetry, instrumentation, and observability features that improve detection coverage, reproducibility, and security‑relevant data collection.
 </li>
 <li>
 Build CI/CD hooks, governance features, and safety-criteria validation that support safe rollout and evaluation of Copilot capabilities.
 
 
 </li>
 </ul>
 
 Collaboration + Impact
 
 
 
 <ul>
 <li>
 Work closely with applied scientists, red teamers, and partner engineering teams to translate top risks into testable requirements and secure engineering patterns.
 </li>
 <li>
 Contribute to the Agentic Security Platform&mdash;shared services that support evaluation at scale across Copilot and foundation‑model&ndash;powered applications.
 </li>
 <li>
 Participate in design reviews, threat modeling sessions, and code reviews with a focus on reliability, security, and defense‑in‑depth.
 </li>
 <li>
 Write clear technical documentation, sample code, and best‑practice guidance consumed by internal product teams.
 
 
 </li>
 </ul>
 
 Operational Excellence
 
 
 
 <ul>
 <li>
 Ensure systems meet expectations for availability, reliability, performance, and scalability.
 </li>
 <li>
 Drive continuous improvement by automating workflows, reducing operational toil, and improving development velocity for the broader ecosystem.
 </li>
 <li>
 Build reusable components and practices that teams across Microsoft can adopt to improve safety and evaluation consistency.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Required Qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
 
 
 </li>
 </ul>
 
 Other Requirements
 
 
 
 <ul>
 <li>
 Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:
 
 
 </li>
 </ul>
 
 Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
 
 
 
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Master's Degree in Computer Science or related technical field with proven experience coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
 </li>
 <ul>
 <li>
 OR Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
 </li>
 <li>
 OR equivalent experience.
 </li>
 </ul>
 <li>
 2+ years of engineering experience working on production systems, services, or frameworks.
 </li>
 <li>
 Experience with AI/ML workflows, agentic systems, or evaluation frameworks (SEVAL/CARES, safety scorecards, dataset generation, etc.).
 </li>
 <li>
 Understanding of adversarial ML concepts (jailbreaks, prompt injection, toolchain misuse) or threat‑driven engineering.
 </li>
 <li>
 Experience with telemetry/observability stacks (Kusto, OpenTelemetry, metrics/logging pipelines).
 </li>
 <li>
 Solid collaboration, communication, and documentation skills; ability to partner with PM/TPM, applied science, and security teams.
 </li>
 <li>
 Passion for security, reliability, and responsible deployment of AI systems.
 </li>
 <li>
 Experience building software systems or services, including debugging, testing, or CI/CD practices.
 </li>
 <li>
 Familiarity with distributed systems, RESTful APIs, or cloud‑based services (Azure preferred).
 
 </li>
 </ul>
 #Copilot #LLM #Agent #Security
 
 
 Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $100,600 - $199,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $131,400 - $215,400 per year.
 
 
 Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
 
 
 https://careers.microsoft.com/us/en/us-corporate-pay
 
 
 This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
 
 
 Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about
 
 requesting accommodations.
 
</div>

Software Engineer

lululemon

Who we are
 
lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.
 
About this team
 
The Data & AI Security team is responsible for protecting the organization’s most critical data and AI assets while enabling responsible, scalable innovation. We build and operate Data Security Posture Management (DSPM) and AI Security Posture Management (AISPM) capabilities across a complex, global ecosystem. Our work is highly cross-functional, partnering with Data & Analytics, Engineering, Legal, Privacy, and GRC teams to embed security by design while keeping the organization fast, compliant, and resilient. Our focus is on visibility, prevention, and remediation at scale, balancing strong security controls with minimum business friction.
 
The Senior Cybersecurity Engineer is responsible for securing the organization’s AI ecosystem by discovering, assessing, and mitigating risks associated with AI models, data usage, model lifecycle, and AI-driven workflows. This role partners closely with Data Governance, Platform Engineering, and Security Architecture to enable safe and scalable AI adoption while ensuring regulatory, privacy, and corporate policy alignment.
 
Core responsibilities
 
As a Senior Cybersecurity Engineer, you will lead complex security engineering initiatives, designing and implementing security controls, platforms, and solutions that protect critical systems at scale. You will build and operate enterprise security capabilities such as centralized authentication, security enforcement mechanisms, and security automation, while applying secure coding practices and rigorous testing and validation. You will partner closely with engineering teams to embed security into system design and delivery, drive improvements to security quality and reliability, and mentor junior engineers through hands-on technical leadership and knowledge sharing.
 
Select responsibilities include: 
*
 <ul>
<li>Build enterprise security systems implementing centralized authentication, security platforms, and organization-wide controls</li>
<li>Lead comprehensive threat modeling and security assessments for complex systems, evaluating attacker behaviour across integrations and influencing secure design decisions early in the development lifecycle</li>
<li>Own end-to-end response for complex security incidents, driving deep root cause analysis and delivering coordinated long-term improvements to detection, prevention, and security monitoring capabilities</li>
<li>Develop advanced security code, tools, and libraries including security automation platforms, scanners and detectors, security testing systems, and security SDKs</li>
<li>Establish security code standards defining secure coding practices, code review requirements, and implementation quality</li>
</ul>
Qualifications
 <ul>
<li>Bachelor’s degree in Computer Science, Cybersecurity, or related field; security certification strongly preferred</li>
<li>6-10 years of experience leading security engineering initiatives, establishing security standards and practices, and building security systems at scale, or equivalent</li>
<li>Hands-on experience securing data used by AI systems, including data discovery, classification, access governance, and usage monitoring across cloud data platforms, feature stores, and AI pipelines</li>
<li>Experience securing AI and analytics workloads in modern cloud environments, including identity and access controls, service-to-service authentication, secrets management, and policy enforcement across platforms supporting AI/ML development and inference (e.g., cloud data platforms, ML platforms, containerized services)</li>
<li>Proven experience implementing enterprise security controls and building security infrastructure including centralized authentication, authorization services, and security policy enforcement systems at scale</li>
<li>Track record of writing complex security systems including security platforms and SDKs; experience establishing security code review practices, security checklists, and security development frameworks</li>
<li>Demonstrated ability to lead advanced threat modeling for complex systems, anticipating sophisticated adversarial behaviour; experience owning investigation and resolution of complex security incidents with deep root cause analysis</li>
<li>Familiarity with DSPM, DLP, or data governance tooling applied to AI use cases is strongly preferred</li>
</ul>
Must haves
 <ul>
<li>Acknowledge the presence of choice in every moment and take personal responsibility for your life.</li>
<li>Possess an entrepreneurial spirit and continuously innovate to achieve great results.</li>
<li>Communicate with honesty and kindness and create the space for others to do the same.</li>
<li>Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.</li>
<li>Foster connection by putting people first and building trusting relationships.</li>
<li>Integrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously.</li>
</ul>
Please Note: 
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time for this role.
 
Compensation and benefits package
 
lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from $147,300 - $193,300 annually; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.
 
At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:
 <ul>
<li>Extended health and dental benefits, and mental health plans</li>
<li>Paid time off</li>
<li>Savings and retirement plan matching</li>
<li>Generous employee discount</li>
<li>Fitness & yoga classes</li>
<li>Parenthood top-up</li>
<li>Extensive catalog of development course offerings</li>
<li>People networks, mentorship programs, and leadership series (to name a few)</li>
</ul>
Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.
 
Workplace arrangement
 
This role is classified as In-Person under our SSC Workplace Policy:
 
In-person collaboration and/or office-based work is necessary or important for the role. Work is mainly performed onsite, 4-5 days per week depending on role requirements.
 
#LI-CM1

Senior Cybersecurity Engineer - Data & AI Security

<div>Overview 
Copilot is becoming an agentic system: it can plan, reason, and take actions across tools, data, and services. Securing that kind of system requires more than traditional boundaries or static controls&mdash;it demands adaptive defenses, intelligent guardrails, and provable isolation that operate continuously at runtime.
Copilot Security and Privacy is responsible for building those capabilities directly into Copilot. Our work focuses on new security primitives for agentic AI, including real‑time intent validation, workload isolation with verifiable guarantees, AI‑driven guardrails, and offensive security techniques that model how intelligent systems fail under pressure.
We are hiring a Principal Security Engineer to help design and build these systems end‑to‑end. This is a hands‑on engineering role for someone who wants to ship production code into a globally deployed AI platform&mdash;developing adaptive defenses, agentic offensive security, and security architectures that scale with autonomy. The problems are technically deep, often unsolved, and central to making advanced AI systems deployable in the real world.
Most security roles focus on protecting existing systems. This role helps define the security architecture for systems that are still being invented. 
You will work at the intersection of AI, security, privacy, and distributed systems&mdash;building defenses that enable safe autonomy rather than limiting innovation. If you want to shape how agentic AI is secured at global scale, this is a uniquely high‑impact opportunity.
Microsoft&rsquo;s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Starting January 26, 2026, Microsoft AI (MAI) employees who live within a 50- mile commute of a designated Microsoft office in the U.S. or 25-mile commute of a non-U.S., country-specific location are expected to work from the office at least four days per week. This expectation is subject to local law and may vary by jurisdiction. 
Responsibilities 
<ul><li>
Design and build secure, high‑performance platform components that support Copilot&rsquo;s agentic workflows across cloud and device environments.</li><li>
Develop novel security mechanisms for agentic AI systems, including real‑time intent validation, information‑flow controls, isolation boundaries, and abuse‑resistant orchestration.</li><li>
Eliminate entire classes of vulnerabilities by creating secure‑by‑default APIs, sandboxing layers, and hardened system interfaces.</li><li>
Build and operate offensive security tooling and agents that continuously probe Copilot&rsquo;s autonomy, reasoning paths, and trust boundaries.</li><li>
Partner closely with AI researchers, platform engineers, and product teams to translate research and prototypes into production‑ready security features.</li><li>
Write high‑quality, well‑tested code across backend services, platform layers, and AI‑adjacent systems.</li><li>
Use telemetry, signals, and data‑driven analysis to detect abuse, anomalous agent behavior, and emerging threat patterns.</li><li>
Navigate ambiguity, make sound engineering tradeoffs, and ship iteratively in a fast‑paced product environment.</li><li>
Contribute to a culture of high ownership, technical excellence, and inclusive collaboration.</li></ul> 

Qualifications 
Required Qualifications:<ul><li>
Doctorate in Statistics, Mathematics, Computer Science, or related field AND 3+ years of experience OR Master&rsquo;s Degree AND 4+ years of experience OR Bachelor&rsquo;s Degree AND 6+ years of experience in security engineering, secure software development, large-scale computing, threat modeling, or applied security analytics, including experience designing or building systems to detect, prevent, or mitigate security threats, or equivalent experience.</li></ul> 
Preferred Qualifications:<ul><li>
Doctorate in Statistics, Mathematics, Computer Science, or related field AND 6+ years of experience OR Master&rsquo;s Degree AND 5+ years of experience OR Bachelor&rsquo;s Degree AND 6+ years of experience in security engineering, secure software development, large-scale computing, threat modeling, or applied security analytics, including experience designing or building systems to detect, prevent, or mitigate security threats, or equivalent experience.</li><li>
8+ years of professional engineering experience.</li><li>
Solid coding skills in one or more of the following: C, C++, C#, Java, JavaScript, or Python.</li><li>
Demonstrated experience designing, building, and operating production systems at scale.</li><li>
Experience building or securing large‑scale distributed systems on cloud platforms such as Azure, AWS, or GCP.</li><li>
Familiarity with emerging attack classes against AI systems, including prompt‑based exploits, agent misbehavior, information‑flow vulnerabilities, or model‑assisted exfiltration.</li><li>
Proven ability to design system interfaces and abstractions that reduce misuse and prevent vulnerabilities by construction.</li><li>
Experience with AI platforms, LLM frameworks, or ML pipelines&mdash;or the ability to ramp up quickly.</li><li>
Background in sandboxing, isolation, container security, or trusted execution environments.</li><li>
Solid analytical skills, including working with telemetry, anomaly detection, or ML‑based security signals.</li><li>
Ability to decompose ambiguous, unsolved problems into practical engineering plans.</li><li>
Clear, effective communication skills across technical and non‑technical audiences.</li></ul> 
#MicrosoftAI #MAIDPS 
 
 
Security Operations Engineering IC5 - The typical base pay range for this role across the U.S. is USD $139,900 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: 
https://careers.microsoft.com/us/en/us-corporate-pay 
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. 
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process.</div>

Member of Technical Staff - Security Engineer

Carnegie Mellon University

<div><div><div>At the SEI AI Division, we conduct research in applied artificial intelligence and the engineering questions related to the practical design and implementation of AI technologies and systems. We currently lead a community-wide movement to mature the discipline of AI Engineering for Defense and National Security.
</div><div>As our government customers adopt AI and machine learning to provide leap-ahead mission capabilities, we
</div><div><ul><li>build real-world, mission-scale AI capabilities through solving practical engineering problems
</li></ul></div><div><ul><li>discover and define the processes, practices, and tools to support operationalizing AI for robust, secure, scalable, and human-centered mission capabilities
</li></ul></div><div><ul><li>prepare our customers to be ready for the unique challenges of adopting, deploying, using, and maintaining AI capabilities
</li></ul></div><div><ul><li>identify and investigate emerging AI and AI-adjacent technologies that are rapidly transforming the technology landscape 
 
</li></ul></div><div>Are you creative, curious, energetic, collaborative, technology-focused, and hard-working? Are you interested in making a difference by bringing innovation to government organizations and beyond? Apply to join our team. 
 
</div><div>Overview : As an Associate Machine Learning Engineer, you will specialize in engineering solutions that support research into the vulnerabilities of AI and ML algorithms and securing against those vulnerabilities. 
</div><div>The Secure AI Lab within the SEI&rsquo;s AI Division focuses on improving the security and robustness of AI systems. As part of the world-class research community at Carnegie Mellon University, the Secure AI Lab conducts and applies cutting-edge research to protect AI systems from adversaries who aim to manipulate the system to learn, do, or reveal something it isn&rsquo;t supposed to. 
</div><div>The Secure AI Lab consists of machine learning research scientists, machine learning engineers, and software developers who work together to solve problems in the following areas:
</div><div><ul><li>Counter AI Research : Study threat models targeting AI and ML algorithms , understand the behaviors of AI algorithms, identify weak points, and design novel ways to subvert AI and ML systems .
</li></ul></div><div><ul><li>AI and ML Algorithm Defense Research: Creat e practical mitigations and defenses for observed attacks affecting AI and ML algorithms and evaluate the effectiveness of defensive techniques .
</li></ul></div><div><ul><li>Applied Adversarial Machine Learning: Advance the state of the art in adversarial machine learning by developing and transitioning capabilities to government sponsors. 
</li></ul></div><div>As an engineer, you will solve problems for government sponsors by analyzing, designing, and building responsible AI systems. 
</div></div><div><div>Your day-to-day engineering tasks will include:
</div><div><ul><li>Identifying and i nvestigating emerging AI and AI-adjacent technologies.
</li></ul></div><div><ul><li>Defining and r efining processes, practices, and tools for working with AI.
</li></ul></div><div><ul><li>Designing and b uilding well-engineered prototypes of AI systems.
</li></ul></div><div><ul><li>Transitioning and p roviding guidance on AI capabilities to government sponsors. 
</li></ul></div><div>Duties
</div><div><ul><li>Building Machine Learning Models and Systems: You will work with machine learning frameworks such as TensorFlow, PyTorch , Torch, and Caffe and modern programming languages including Python, C/C++, and Java. You will build and work with dat a pipelines, ETL processes, and backend systems. You will work with, extend, and implement state-of-the-art machine learning methods.
</li></ul></div><div><ul><li>Technical Experimentation: You will experiment with modern and emerging machine learning frameworks, methods, and algorithms in application domains that include computer vision, natural language processing, planning and scheduling, robot control, and engineering safe, trusted, and reliable machine learning systems.
</li></ul></div><div><ul><li>Test ing and evaluat ion . You'll conduct rapid prototyping to demonstrate and evaluate technologies in relevant environments. You'll evaluate systems for performance and security. You'll test capabilities using novel testing and analysis techniques.
</li></ul></div><div><ul><li>Collaborat ion . You'll actively participate on teams of developers, researchers, designers, and technical leads. You'll collaborate with researchers and our government customers to understand challenges, needs, and possible solutions .
</li></ul></div><div><ul><li>Mentoring. You'll contribute to improving the overall technical capabilities of the Division by mentoring and teaching others, participating in design (software and otherwise) sessions, and sharing insights and wisdom across the SEI. 
</li></ul></div><div>Knowledge and Experience
</div><div><ul><li>Comprehensive knowledge of machine learning ; previous experience in adversarial machine learning desirable but not required
</li></ul></div><div><ul><li>A track record of using well-established engineering practices to solve difficult problems
</li></ul></div><div><ul><li>An understanding of how to convert research results in to functioning prototypes or capabilities
</li></ul></div><div><ul><li>Experience l ead ing technical projects in novel areas with limited previous work to build upon
</li></ul></div><div><ul><li>Strong written and verbal communication skills ; able to convey complex technical ideas in a layperson&rsquo;s terms
</li></ul></div></div><div><div><ul><li>Ample experience with publishing written or technical artifacts showcasing your work
</li></ul></div><div><ul><li>Strong collaboration skills for working with colleagues and sponsors
</li></ul></div><div><ul><li>Willing ness to guide and mentor junior team members 
</li></ul></div><div>Requirements
</div><div><ul><li>A bachelor&rsquo;s degree in computer science, statistics, machine learning, electrical engineering, or related discipline with three (3) years of experience; OR MS in the same fields with one (1) year of experience; OR PhD in a relevant discipline. 
 
</li><li>Willingness to work onsite 5 days per week at SEI offices in Pittsburgh, PA or Arlington, VA.
</li></ul></div><div><ul><li>You will be subject to a background investigation and must be able to obtain and maintain an active Department of War security clearance. 
 
</li><li>Willing to travel up to 25% of the time to locations outside of your home location. Travel sites include SEI offices in Pittsburgh and Washington, D.C., sponsor sites, and conferences.
</li></ul></div></div>Joining the CMU team opens the door to an array of exceptional benefits.
Benefits eligible employees enjoy a wide array of benefits including comprehensive medical, prescription, dental, and vision insurance as well as a generous retirement savings program with employer contributions. Unlock your potential with tuition benefits , take well-deserved breaks with ample paid time off and observed holidays , and rest easy with life and accidental death and disability insurance.
Additional perks include a free Pittsburgh Regional Transit bus pass, access to our Family Concierge Team to help navigate childcare needs, fitness center access , and much more!
For a comprehensive overview of the benefits available, explore our Benefits page .
At Carnegie Mellon, we value the whole package when extending offers of employment. Beyond credentials, we evaluate the role and responsibilities, your valuable work experience, and the knowledge gained through education and training. We appreciate your unique skills and the perspective you bring. Your journey with us is about more than just a job; it&rsquo;s about finding the perfect fit for your professional growth and personal aspirations.
Are you interested in an exciting opportunity with an exceptional organization?! Apply today!
Location
Arlington, VA, Pittsburgh, PA
Job Function
Software/Applications Development/Engineering
Position Type
Staff &ndash; Regular
Full Time/Part time
Full time
Pay Basis
Salary
More Information:
<div><div><div><div><ul><li>Please visit &ldquo; Why Carnegie Mellon &rdquo; to learn more about becoming part of an institution inspiring innovations that change the world.</li><li> 
</li><li>Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran .
</li><li>Statement of Assurance</li></ul></div></div></div></div></div>

Associate Machine Learning Engineer - Secure AI Lab

ServiceTitan

<div>Ready to be a Titan?
At ServiceTitan, we are transforming product security into a core part of how engineering delivers software. We are looking for an AI-Focused Senior Application Security Engineer to help define and deliver a secure paved road, creating automated, developer friendly security patterns that enable our 80 plus R&amp;D teams to build securely by default without slowing down innovation.
In this role, you will partner closely with engineering to embed practical guardrails, manage emerging risks like non-human identities and data exposure, and enable teams to move quickly without compromising trust. This is an opportunity to shape the future of application security in an AI first environment, turning security into a core enabler of innovation rather than a constraint.<h2 class="jobSectionHeader">
What you&rsquo;ll do:</h2>
1. Secure-by-Design Engineering<ul><li>
Pipeline Automation: Embed security directly into the development pipeline through intelligent prompting and AI driven agents.</li><li>
Secure-by-Default Code: Collaborate with Engineering to develop and maintain secure microservice templates and libraries that have security controls built in from the start.</li><li>
Supply Chain Protections: Implement controls to secure dependencies, build artifacts, and third party integrations. Partner with engineering to enforce integrity, provenance, and policy checks within build and release workflows.</li></ul>
2. AI-Driven Security Testing &amp; Validation<ul><li>
Automated Scanning: Evaluate, configure, and implement AI agentic tooling to autonomously test our web applications for vulnerabilities.</li><li>
Simulation &amp; Validation: Use agentic tooling to run proactive simulations based on emerging threats to validate our defenses in real time.</li><li>
Outcome Accountability: Drive adherence to vulnerability remediation SLAs by partnering with engineering teams to track, prioritize, and resolve security issues. Ensure clear ownership, measurable progress, and consistent follow through to reduce risk and maintain accountability.</li></ul>
3. AI &amp; Identity Security<ul><li>
AI Guardrails: Design and implement technical guardrails for AI Coding Agents and Model Context Protocols (MCP) to ensure safe adoption of AI in the development lifecycle.</li><li>
AI-Driven Tooling: Help operationalize AI based tooling to act as a &quot;GPS&quot; for developers, tuning the system to provide accurate, on demand threat modeling, design, and development advice.</li><li>
Non-Human Identity Management: Partner with engineering to define and implement strategies for managing machine identities across AI systems, including service accounts, API keys, and agent authentication. Enforce least privilege access, credential lifecycle management, and integration with secrets management and CI CD pipelines to reduce risk and prevent misuse.</li></ul>
4. Developer Enablement &amp; Security Operations<ul><li>
Technical &quot;Pit Crew&quot;: Act as the AppSec technical expert for the Security Champions Program. While leadership manages the program logistics, you will be the expert answering complex coding questions and guiding Champions on how to fix vulnerabilities.</li><li>
Contextual Training: Assist in setting up &quot;Just in Time&quot; training campaigns that trigger micro-trainings when engineers introduce vulnerabilities, allowing them to fix their own code.</li><li>
Triage to Automate: Own the initial triage of incoming vulnerability tickets (SAST/SCA). You will use this hands on work to identify the &quot;noise&quot; and pattern match recurring issues, directly informing which guardrails you build next.</li></ul><h2 class="jobSectionHeader">
What you&rsquo;ll bring:</h2><ul><li>
Experience: 5+ years of experience in Product/Application Security, with a strong background in software engineering.</li><li>
Demonstrated AI Expertise: Proven experience at the intersection of AI and security, including securing AI workloads and leveraging AI agents to enhance defensive capabilities.</li><li>
Modern AppSec: Experience implementing tools and driving for secure outcomes throughout the Secure Software Development Lifecycle including Threat Modeling, Code Scanning, and Penetration testing.</li><li>
Automation Mindset: Proven ability to prompt, script, and automate security tasks. You prefer building a tool to solve a problem over fixing it manually.</li></ul><h2 class="jobSectionHeader">
Why this role?</h2>
Own Outcomes, Not Activity: Your success will be measured by real risk reduction. You will directly influence vulnerability backlog reduction, remediation velocity, and the overall security posture of the organization. 
Operate at the Intersection of Engineering and Security: You will work side by side with engineering teams to shape how software is built, secured, and deployed. This role gives you the platform to influence architecture, development practices, and platform level controls.
Lead the Next Evolution of AppSec: You will help define how modern security teams leverage automation and intelligent systems to scale. From secure by design patterns to autonomous testing and remediation, you will be pushing the boundaries of how security is done. 
High Ownership, High Leverage: You will have the autonomy to identify problems, design solutions, and implement them end to end. The work you do will scale across teams and services, amplifying your impact well beyond a single application or domain.
Be Human With Us:
Being human isn&rsquo;t about checking every box on a list. It&rsquo;s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we&rsquo;re solving. We&rsquo;re in this together. Come be human, with us. 
 
Use of AI Technology:
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.
What We Offer: 
When you join our team, you&rsquo;re not just accepting a job. You&rsquo;re making a career move. Here&rsquo;s how we&rsquo;ll support you in doing some of the most impactful work of your career:<ul><li>
Flextime, recognition, and support for autonomous work: Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.</li><li>
Holistic health and wellness benefits: Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.</li><li>
Support for Titans at all stages of life: Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.</li></ul>
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation.The expected salary range for this role for candidates residing in the United States is between $125,700 USD - $168,100 USD. Compensation for candidates residing outside the United States will vary by location and the specific salary range will be discussed during the hiring process. Actual compensation for an individual may vary depending on skills, performance over time, qualifications, experience, and location. In addition to the base salary, the total compensation package also includes an annual bonus, equity and a holistic suite of benefits.</div>

Senior Application Security Engineer, AI

Search 10000+ Ai security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.