Staff Information Security Engineer – AI First

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $170k - $220k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Rithum

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 1997

🛍️ eCommerce

📣 Marketing

🤖 Artificial Intelligence

eCommerce • Marketing • Artificial Intelligence

Rithum is a comprehensive e-commerce platform designed to empower brands, retailers, and suppliers to effectively launch and scale their businesses. Offering a variety of solutions including multichannel marketing, fulfillment management, and AI-driven supplier discovery, Rithum helps users optimize their online presence and streamline operations across a vast network of marketplaces. With a focus on flexibility and efficiency, Rithum aims to transform commerce by creating profitable and engaging shopping experiences.

📋 Description

• Bridge architectural intent and operational reality by mediating security requirements and feasible implementation • Propose compensating controls and register, track, and remediate residual risks • Implement preventive, default-on security controls across cloud and enterprise environments • Codify security controls as policy-as-code and infrastructure-as-code • Govern the use of AI tools and models through enforced controls • Implement and enforce identity and access controls, including boundaries for AI systems and non-human/agent identities • Maintain the InfoSec risk register and translate emerging threats into actionable engineering guidance • Support third-party and vendor risk assessments, especially for AI-pipeline vendors • Automate security workflows such as evidence collection, access reviews, and alert enrichment • Build or operate AI-assisted security agents with human approval gates and least-privilege credentials • Integrate SIEM, CSPM, DAST/SAST, and vulnerability scanners with LLM layers • Define and enforce AI feature security requirements, including model access controls, prompt-injection mitigations, output validation, and data-handling boundaries • Conduct threat modelling for agentic and LLM-based systems • Collaborate with Platform Engineering, IT, Security Champions, and external auditors • Work autonomously while balancing security research with fast-paced delivery

🎯 Requirements

• 5+ years of security engineering experience with demonstrated AI/ML security depth, including prompt injection, model supply chain, adversarial inputs, and RAG • Experience using AI tools such as ChatGPT, Copilot, and Claude • Experience with LLM frameworks and APIs such as OpenAI, Anthropic, and LangChain • Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including AI systems and non-human identities • Infrastructure-as-code and policy-as-code experience, including Terraform and OPA/Rego • Proficiency in a scripting language for automation; Python preferred • Cloud security expertise, including AWS Solutions Architect / Security Specialty or equivalent demonstrated expertise • Experience with multi-account governance, preventive guardrails, and policy-as-code • Application security knowledge including OWASP Top 10, OWASP LLM/GenAI Top 10, and secure SDLC • Threat-modelling methodology experience, including STRIDE, PASTA, or equivalent • Practical experience building or operating AI agents • Experience integrating SIEM, CSPM, SAST/DAST/SCA security tooling • Working knowledge of SOC 2 and/or ISO 27001 control frameworks • Willingness/ability to travel up to 10% • Preferred: AI agents in production, GDPR/CCPA and DPIAs, red teaming or adversarial ML research, privileged access, key management, posture management, data protection, EDR, CASB, DLP, IAST, CCSK, TAISE, or AWS certifications

🏖️ Benefits

• Medical, dental and vision benefits with affordable health care plans and company HSA contributions, starting on Day 1 • 6% 401(k) match • 20 days of Paid Time Off • 9 Company-Paid holidays • 2 paid floating holidays • 7 paid sick days • 2 Wellness days • 1 Paid Volunteer Day • PTO increases to 22 days at 3 years of service and 25 days at 5 years • 12 weeks primary caregiver leave • 4 weeks secondary caregiver leave • Accident, critical illness, and hospital indemnity insurance • Pet insurance • Legal assistance and identity theft insurance plans • Life insurance equal to 2x salary • Calm app access • Employee Assistance Program • $65/month remote work stipend for internet • Culture and team-building activities • Tuition assistance • Career development opportunities • Charitable contribution match up to $250 per year • Discretionary bonus of 12% of annual base salary • Remote-first working conditions • Comprehensive benefits and wellness plans • Industry-competitive compensation and total rewards benefits