Principal Security Engineer, Product – AI

🕒 May 14

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Marqeta

Marqeta

501 - 1000 employees

Founded 2010

💳 Fintech

🤝 B2B

💰 Post-IPO Equity on 2021-06

Fintech • B2B • Payments

Marqeta is a leading modern card issuing platform that empowers businesses to integrate comprehensive credit and payment solutions seamlessly into their processes. Specializing in debit, credit, prepaid, and virtual cards, Marqeta provides dynamic spend controls, Just-in-Time (JIT) funding, and ensures compliance and risk management. The platform supports digital wallets, tokenization, and embedded finance, catering to industries such as digital banking, expense management, and on-demand services. With its open APIs, Marqeta facilitates the creation and management of card products, offering scalability and flexibility for enterprises ranging from startups to global companies.

📋 Description

• Lead product security engineering for our payment platform—owning threat modeling, security architecture review, secure SDLC practices, and API security across the engineering organization • Help mature our AI security program developing genAI controls, securing ML pipelines, and working alongside the Model Risk Office for model evaluations. • Provide security architecture oversight across infrastructure and enterprise security—endpoint, network, VPN, and corporate security controls—ensuring technical standards are coherent across all security domains • Shape how security engineering scales across the organization through tooling, frameworks, security champions engagement, and engineering partnerships

🎯 Requirements

• 10+ years of security engineering experience with demonstrated technical leadership across multiple security domains; or equivalent combination of education and experience • Deep product security expertise: threat modeling, security architecture review, secure code review, API security, authentication/authorization design, and secure SDLC practices • Experience with or strong interest in AI/ML security—understanding of risks including adversarial attacks, model poisoning, prompt injection, data privacy, and AI supply chain threats. We want someone who is genuinely excited about AI technology and wants to secure it, not just govern it • Broad security fluency across infrastructure and enterprise security—endpoint protection, network security, identity, and cloud security—even if your deepest expertise is in application and product security • Experience working in cloud-native environments (AWS preferred) with familiarity across AI/ML services (Bedrock, SageMaker, etc.) • Proven ability to build security frameworks, tools, and programs from the ground up • Strong programming skills in at least one language (Python, Java, Go, or similar) with the ability to read and review code across multiple languages • Experience with security assessment methodologies and risk management frameworks • Working knowledge of compliance and control frameworks relevant to financial services (PCI DSS, SOX, SOC2, NIST CSF) • Ability to communicate complex security risks to both technical and executive audiences.

🏖️ Benefits

• Multiple health insurance options • Flexible time off – take what you need • Retirement savings program with company contribution and after tax contributions • Equity in a publicly-traded company and an Employee Stock Purchase Program • Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave • Free therapy sessions, financial and professional coaching, and legal advice • Monthly stipend to support our remote work model • Annual “development dollars” to support our people growth and development • Through Flex First, the freedom to live and work wherever you and your family thrive

Apply Now

Similar Jobs

🕒 May 14

CareSource

1001 - 5000

⚕️ Healthcare Insurance

Information Security GRC Analyst ensuring compliance with information security risk management policies. Measure, monitor, and report on security risks and engage stakeholders for risk mitigation.

TCP/IP

🕒 May 14

CareSource

1001 - 5000

⚕️ Healthcare Insurance

Information Security Engineer III at CareSource responsible for IT security monitoring and compliance. Designing processes and systems to prevent security threats and ensure compliance with regulations.

AWS

Azure

Cloud

🕒 May 14

Bicycle Health

51 - 200

⚕️ Healthcare Insurance

📡 Telecommunications

🧘 Wellness

Director of Information Security architecting security protocols for Bicycle Health's online platform. Aiming for HITRUST certification and protecting sensitive patient data.

Cloud

🕒 May 14

Chickasaw Nation Industries, Inc.

1001 - 5000

🏛️ Government

🤝 B2B

🚗 Transport

Cybersecurity Assessment and Authorization Analyst at Chickasaw Nation Industries supporting the Indian Health Service. Responsible for security certifications and compliance with government regulations.

Linux

🕒 May 14

Witan Search

1 - 10

🎯 Recruiter

🤝 B2B

Chief Information Security Officer leading cybersecurity at a globally recognized, NYSE-listed manufacturer. Owning the enterprise cybersecurity strategy and overseeing a complex IT and OT environment.

AWS

Azure

Cloud

Cyber Security

Google Cloud Platform