AI Security Manager

🕒 May 22

🇧🇷 Brazil – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 55%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

iFood

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🍽️ Food & Beverage

📦 Logistics

📣 Marketing

Food & Beverage • Logistics • Marketing

iFood is a leading food delivery platform based in Brazil, connecting customers with a wide array of restaurants and food options. The company leverages cutting-edge technology and artificial intelligence to improve customer experience, streamline operations, and enhance delivery logistics. iFood fosters a diverse and inclusive work environment, focusing on sustainability and the positive impact of its services on the community.

📋 Description

• Coordinate and prioritize security testing for LLM-based applications, including prompt injection, jailbreak, data leakage, tool abuse, and context manipulation scenarios • Oversee the execution of test cases on internal and user-facing agents, ensuring alignment with the team’s defined playbooks • Lead the evolution of test suites and tools, such as Promptfoo or equivalent solutions, driving innovation and efficiency • Monitor and analyze alerts and signals generated by controls such as LLM Firewall, guardrails, Anonymizer, and AI Gateway, ensuring rapid and effective responses • Validate and review functional and regression testing for AI Security services and controls, ensuring the quality and security of deliverables • Guide the analysis of logs, metrics, and events related to traffic from LLMs, agents, and internal platforms, identifying patterns and opportunities for improvement • Manage the identification of false positives and false negatives, and propose improvements to detection rules, heuristics, and policies • Review and approve security analyses of MCPs, skills, and tools used by developers or agents • Ensure the security of ML artifacts, the software supply chain, and quality gates in pipelines, promoting best practices and compliance • Document and review technical findings, evidence, FAQs, guides, playbooks, and best practices • Promote education, security awareness, CTFs, meetups, applied research, and the consolidation of technical references, strengthening the security culture

🎯 Requirements

• Strong experience in information security, software development, infrastructure, or related fields • Advanced knowledge of APIs, HTTP, authentication, authorization, logs, and event analysis • Proficiency in at least one programming language, preferably Python, Go, or JavaScript/TypeScript • Experience with Git, GitLab/GitHub, CI/CD pipelines, and code review • Interest in and knowledge of Artificial Intelligence, LLMs, agents, Machine Learning, or AI security • Ability to turn technical learnings into strategies, tests, checklists, or actionable recommendations • Excellent written and verbal communication skills for documenting and presenting tests, findings, evidence, and recommendations • Strong attention to detail when analyzing logs, permissions, prompts, configurations, and data flows • Technical leadership, curiosity, and the ability to continuously improve based on feedback and learning • Responsible handling of sensitive data, credentials, internal environments, and security testing results • Academic experience, personal projects, or professional experience in security, AI, data, or software engineering • Knowledge of the OWASP Top 10, OWASP Top 10 for LLM Applications, or threat modeling concepts • Familiarity with attack scenarios such as prompt injection, jailbreaks, data leakage, tool abuse, or attacks against LLM applications • Experience with testing tools, automation, scripting, or evidence organization • Knowledge of MCP, skills, agents, AI gateways, token exchange, or identity propagation • Interest in ML Security, model supply chain security, dataset security, dependencies, or Machine Learning artifacts • Participation in CTFs, technical communities, research groups, meetups, or technical writing initiatives

🏖️ Benefits

• No benefits, perks, or additional compensation are specified in the posting