[Hiring] Senior AI Security Engineer @Mercola

Role Description

There’s a particular satisfaction in finding the clue that helps everyone breathe again. You follow it. You make sense of what happened. You help people get back to the work they care about. As Mercola’s Senior AI Security Engineer, you’ll turn that instinct into something people can count on. Feel the pride of seeing a fix hold because you stayed with the problem long enough to prove it worked. Help build a team where people feel comfortable saying, “Something feels off,” and know they’ll be heard.

Key Responsibilities

• Own the incident queue, risk register, and remediation backlog. Assign owners and deadlines, maintain policies and runbooks, and report progress and unresolved risks to leadership.
• Lead technical incident response from triage through recovery validation. Coordinate containment, preserve evidence, and involve Legal or specialist responders as needed.
• Strengthen identity, access, and infrastructure controls across Microsoft 365, Entra ID, AWS, and connected applications. Partner with Infrastructure to verify improvements across endpoints, servers, networks, and cloud platforms.
• Validate logging coverage, retention, alert delivery, and after-hours escalation with internal owners and managed security providers.
• Use AI assistants for investigation, code review, threat analysis, and automation. Independently validate findings and proposed fixes before acting on them. Secure AI applications, agents, and Model Context Protocol (MCP) integrations against prompt injection, excessive permissions, data exposure, and unsafe tool actions.
• Partner with Engineering on application, API, and mobile security. Integrate code, dependency, and secret scanning into development workflows, prioritize exploitable findings, coordinate authorized testing, and verify remediation.
• Build security automation with Python, PowerShell, APIs, or comparable tools. Document ownership, failure alerts, audit trails, and rollback procedures.
• Assess vendor security, data flows, and third-party access. Maintain security evidence for applicable contractual, privacy, and compliance needs, and coordinate security awareness and specialist support.

Qualifications

• Hands-on experience in security engineering, incident response, or security operations, with examples of taking issues through investigation, remediation, and verification.
• Practical experience securing hybrid environments across Microsoft 365 and Entra ID, cloud services such as AWS, endpoints, and networks. Ability to interpret logs and assess access, application permissions, and potential data exposure.
• Experience using AI assistants in engineering or security work. Ability to explain how you limit permissions, protect sensitive information, and validate AI-generated output.
• Ability to write scripts, work with APIs, and review application code or configurations for security issues. Familiarity with Git and CI/CD workflows.
• Ability to prioritize competing security work, coordinate technical owners and providers, and communicate risks and decisions clearly to leadership.
• Sound judgment about evidence preservation, testing authorization, production changes, and when to involve specialists.

Preferred Qualifications

• Experience with Microsoft Defender or comparable endpoint protection, security information and event management (SIEM), or managed detection services.
• Experience with Azure DevOps, application or API security testing, cloud or container security, or governance of AI coding tools and MCP integrations.
• Relevant certifications or a degree are welcome. Mercola values demonstrated capability and equivalent experience equally.

Benefits

• Medical, Dental, and Vision coverage
• Optional Accident, Hospital Indemnity, and Critical Illness
• Employee Assistance Program (EAP)
• Employer-paid Life and AD&D Insurance
• Optional Supplemental Life and AD&D Insurance
• Short- and Long-Term Disability Insurance
• Flexible Spending Accounts
• Health Savings Accounts
• Dayforce Wallet – get paid as you earn
• Employee Discount
• Retirement Planning (401k with matching contribution)
• Pet Insurance
• Wellness Program Offerings
• Paid Time Off, accrued per pay period based on years of service, starting at 15 days annually.
• 9 Paid Holidays per year, including 1 floating holiday.