[Hiring] Principal AI Security Engineer @company

Role Description

The Principal Artificial Intelligence (AI) Security Engineer serves as the technical lead for securing machine learning (ML), generative artificial intelligence (GenAI), and agentic systems in production, with emphasis on healthcare and other regulated environments. This role creates security architecture, threat modeling, control design, and detection strategy across the AI lifecycle, including:

• Data ingestion
• Feature engineering
• Training and fine-tuning
• Evaluation
• Model serving
• Retrieval-augmented generation (RAG) pipelines
• Agent frameworks
• Application programming interface (API) mediation
• Post-deployment monitoring

The Principal AI Security Engineer leads and partners throughout the organization to build enforceable guardrails for:

• Protected health information and electronic protected health information handling
• Identity and access control
• Secrets isolation
• Model and dataset provenance
• Output safety
• Evidence collection for audits and investigations

Qualifications

• Ten (10) years of hands-on security engineering experience spanning application security, cloud security, security architecture, detection and response, platform security, or infrastructure security.
• Bachelor's degree in computer science, information technology, or relevant field. In lieu of degree, six (6) cumulative years of related experience required.
• Demonstrated experience securing production AI/ML systems, including large language model (LLM) applications, model serving stacks, retrieval-augmented generation architecture, or agent frameworks.
• CISA, CISM, CCSP, HCISPP, GIAC and or CISSP certifications preferred.
• Demonstrated advanced expertise in AI threat modeling and adversarial testing.
• Strong implementation knowledge of secure software development lifecycle (SDLC), continuous integration/continuous delivery (CI/CD) security, and cloud-native telemetry pipelines.
• Experience designing or reviewing controls for secure machine learning operations (MLOps).
• Experience instrumenting detections and response workflows using logs, traces, metrics, and incident handling for distributed systems or AI services.
• Advanced working knowledge of RAG security and evaluation harnesses for safety, security, and regulated-data compliance.
• Prior experience in healthcare, payer, provider or similarly regulated environments with PHI/ePHI safeguards preferred.
• Advanced ability to write engineering standards, design docs, threat models, and control requirements.
• Hands-on familiarity with model gateways, policy enforcement layers, and AI observability tooling.
• Working knowledge of static/dynamic application security testing and dependency-risk management.
• Experience with AI red teaming platforms and automated release gates for model or prompt changes.
• Familiarity with Sarbanes Oxley, HIPAA, OCR, AI RFM, HCFA, PCI/DSS, NIST and other regulations impacting security preferred.

Requirements

• Ability to work prolonged periods sitting and/or standing at a workstation and working on a computer.
• Ability to travel across the Health Plan service region for meetings and/or trainings as needed.
• Ability to work in a home office for continuous periods of time for business continuity.

Benefits

• Participation in group health and/or dental insurance
• Retirement plan
• Wellness program
• Paid time away from work
• Paid holidays

Compensation Range(s)

Minimum: $123,304 - Maximum: $221,948. The salary range indicated in this posting represents the minimum and maximum of the salary range for this position. Actual salary will vary depending on factors including, but not limited to, budget available, prior experience, knowledge, skill and education as they relate to the position’s minimum qualifications, in addition to internal equity.

Please note: There may be opportunity for remote work within all jobs posted by the Excellus Talent Acquisition team. This decision is made on a case-by-case basis.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.