Search Remote Jobs

Principal AI Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $203k - $254k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Zip Co's careers page, not through a job board

First seen by Remote Rocketship 0 minutes ago

Logo of Zip Co

Zip Co

1001 - 5000 employees

💳 Fintech

🛍️ eCommerce

💸 Finance

Fintech • eCommerce • Finance

Zip Co is a global ‘Buy Now, Pay Later’ company that provides simpler and fairer payment solutions for millions of customers. With a mission to be the first payment choice everywhere and every day, Zip offers transparent, flexible, and interest-free credit to consumers and businesses. The company partners with major brands like Amazon, Best Buy, eBay, and Uber, focusing on people-centred innovation and financial empowerment.

📋 Description

• Lead the technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows at Zip • Architect and build scalable security controls for LLM applications, RAG systems, and agentic AI platforms • Develop AI security testing, automation, and secure-by-default engineering practices • Define and implement security architecture for LLM applications, RAG, autonomous agents, and AI-powered products • Engineer protections against prompt injection, data exfiltration, insecure tool execution, excessive agency, and other AI-specific threats • Establish secure patterns for model access, NHI access, authorization, secrets management, and sensitive data protection • Design security boundaries for AI agents interacting with enterprise systems, APIs, databases, and cloud infrastructure • Establish secure-by-default patterns, harnesses, and guardrails for AI coding assistants, autonomous development agents, and AI-generated software • Secure MCP servers, agent tool integrations, and AI-enabled development workflows • Build reusable security components, APIs, and automation integrated into engineering platforms and CI/CD pipelines • Build automated security testing and evaluation capabilities for AI applications and agents • Develop AI red teaming, prompt injection testing, and security regression testing • Implement monitoring and detection for suspicious AI behavior, unauthorized tool execution, and sensitive data exposure • Perform post-incident response for agent misalignment and partner with the Agentic Platform team to prevent recurrence • Leverage AI to automate threat modeling, vulnerability analysis, and remediation • Establish Zip's technical direction and engineering standards for AI security • Partner with engineering teams to take secure AI solutions from architecture through production • Design risk-tiering logic aligned with Zip's 5-level AI automation classification • Co-own the security evaluation framework for new AI models and third-party tools • Evaluate emerging AI technologies and security capabilities, making pragmatic build-versus-buy decisions • Mentor engineers and influence technical decisions across security, platform engineering, and software development • Success includes scalable AI security architecture, reusable controls, integrated testing/monitoring/enforcement, reduced manual effort, and secure innovation

🎯 Requirements

• Demonstrated Staff or Principal-level technical leadership in security engineering, application security, or cloud security • Deep security engineering experience plus demonstrable hands-on work with LLM/agent systems • Intimate familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF • Strong understanding of LLM architectures, agentic systems, RAG, and modern AI development frameworks • Experience building AI security evaluations, red-teaming capabilities, model security gateways, and securing AI systems against prompt injection, data leakage, tool abuse, and unauthorized access • Strong software engineering skills, including proficiency in Python or another modern programming language • Experience with cloud-native architectures, APIs, containers, IAM, and modern software delivery practices • Ability to design and implement security controls, automation, and reusable engineering components • Experience threat modeling complex systems and translating security requirements into practical solutions • Strong technical leadership skills with the ability to influence architecture and engineering decisions across teams • A builder's mindset focused on automation, scalability, and secure-by-default engineering • Highly regarded: Experience with LangChain, LangGraph, Semantic Kernel, OpenAI APIs, Azure AI, Google Vertex AI, or similar technologies • Highly regarded: Experience securing MCP servers, autonomous coding agents, or agentic workflows • Highly regarded: Experience with Microsoft Azure, Google Cloud Platform (GCP), Terraform, Kubernetes, and CI/CD security • Highly regarded: Experience in financial services, payments, or other regulated environments • Visa sponsorship is not available for this position

🏖️ Benefits

• Flexible working culture • Incentive programs • Unlimited PTO • Generous paid parental leave • Leading family support policies • Company-sponsored 401k match • Learning and wellness subscription stipend • Beautiful Union Square office with a casual dress code • Industry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices available • Bonus and/or commission awards may be included in total compensation • Visa sponsorship is not available for this position

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 4 hours ago

Stryker

10,000+ employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Principal incident responder leading complex cyberattack investigations, containment, and recovery for Stryker medical technology. Improving playbooks, detection, automation, and cybersecurity readiness.

🔥 8 hours ago

Korbyt

51 - 200

☁️ SaaS

🏢 Enterprise

Head of Security and Compliance owning SOC 2, customer security reviews, policies, and incident response. Protecting Korbyt’s workplace-experience communications platform as a one-person security function.

🔥 15 hours ago

SentiLink

51 - 200

🔐 Security

💳 Fintech

💸 Finance

Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.

🔥 19 hours ago

IREN

201 - 500

🤖 Artificial Intelligence

🤝 B2B

⚡ Energy

Director securing IREN’s AI data centers and GPU clusters across operational technology, compliance, supply chain, and physical facilities. Leading fleet-wide security standards and specialist teams.

🔥 21 hours ago

3Cloud

501 - 1000

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

Cloud security consulting director leading 3Cloud’s Azure security solutions, delivery, and team development. Driving client advisory, go-to-market strategy, account growth, and AI security adoption.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok