[Hiring] Staff Information Security Engineer - AI First @Rithum

Role Description

As a Staff AI-First Information Security Engineer, you own the intersection of AI adoption and information security:

• Designing guardrails for AI-powered products.
• Building automated security tooling.
• Designing security controls and monitoring for an AI-First workforce.
• Helping every team at Rithum move fast without creating risk they cannot see.

This is not a typical security role. You spend as much time building and automating as you do reviewing, turning a repeating control into infrastructure-as-code, a manual review into a workflow, and a vague AI risk into concrete, enforced guardrails. You work autonomously, balancing research with fast-paced delivery, and collaborating closely with Platform Engineering, IT, Security Champions, and external auditors.

Responsibilities

• Act as the bridge between architectural intent and operational reality; mediate conflicts between security requirements and feasible implementation.
• Propose compensating controls where gaps exist and help register, track and remediate residual risks.
• Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code.
• Implement and enforce identity and access controls to an agreed standard, including access boundaries for AI systems.
• Assist in maintaining the InfoSec risk register; track emerging threats and translate them into actionable guidance for engineering teams.
• Support third-party and vendor risk assessments, focusing on vendors who process data through AI pipelines.
• Automate repetitive security workflows and build or operate AI-assisted security agents.
• Integrate security tooling with LLM layers to surface actionable insight and automated responses.
• Define and enforce security requirements for AI-powered features.
• Conduct threat modelling on agentic and LLM-based systems.

Qualifications

• 5+ years of security engineering experience with demonstrated AI/ML security depth.
• Experience using AI tools and LLM frameworks and APIs.
• Hands-on identity and access expertise across modern enterprise and cloud identity stacks.
• Infrastructure and policy-as-code proficiency and scripting language for automation.
• Cloud security expertise, including multi-account governance and preventive guardrails.
• Application security and threat-modelling methodologies experience.
• Working knowledge of SOC 2 and/or ISO 27001 control frameworks.

Preferred Qualifications

• Experience building or operating AI agents in a production environment.
• Awareness of privacy regulation as it touches AI.
• Red teaming or adversarial ML research backgrounds.
• Experience implementing privileged-access, key-management, or data-protection programs.
• Experience with EDR, CASB, DLP, and security automation tools.
• Cloud Architecture or Security certifications.

Travel Required

• Up to 10%

Benefits

• Medical, dental and vision benefits: Affordable health care plans and company HSA contributions, starting on Day 1.
• A 6% 401(k) match.
• Competitive time off package with 20 days of Paid Time Off, 9 Company-Paid holidays, 2 paid floating holidays, 7 paid sick days, 2 Wellness days, and 1 Paid Volunteer Day.
• 12 weeks primary caregiver leave & 4 weeks secondary caregiver leave.
• Accident, critical illness, and hospital indemnity insurance.
• Pet insurance.
• Legal assistance and identity theft insurance plans.
• Life insurance 2x salary.
• Access to the Calm app and the Employee Assistance Program.
• $65/month Remote work stipend for internet.
• Culture and team-building activities.
• Tuition assistance.
• Career development opportunities.
• Charitable contribution match up to $250 per year.