Security Engineer

Asks for

• AI/LLM deployment securityThe ad says“We are seeking a Security Engineer who possesses expertise in cloud environments and a strong focus on securing AI/LLM deployments. You will be part of a team that protects system boundaries, keeps computer systems and network services hardened against attacks, and secures sensitive data. You will collaborate closely with our team to ensure that our products, cloud environments, and AI integrations are built to industry security standards and best practices.”
• Amazon BedrockThe ad says“Experience securing AI/LLM deployments in cloud environments — including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls”
• authenticationThe ad says“Understanding of core security concepts — cryptography, authentication, authorization, security protocols, and vulnerability classes — as applied to web application and cloud service security”
• authorizationThe ad says“Understanding of core security concepts — cryptography, authentication, authorization, security protocols, and vulnerability classes — as applied to web application and cloud service security”
• AWSThe ad says“Own the security of our entire AWS and GCP environments — including IAM, compute, storage, networking, and workload configurations — hardening the footprint, enforcing baselines, and remediating misconfigurations and vulnerabilities across both clouds”
• change managementThe ad says“Participate in incident management, change management, security policy management, and security incident response”
• ClaudeThe ad says“Experience securing AI/LLM deployments in cloud environments — including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls”
• cloud securityThe ad says“We are seeking a Security Engineer who possesses expertise in cloud environments and a strong focus on securing AI/LLM deployments. You will be part of a team that protects system boundaries, keeps computer systems and network services hardened against attacks, and secures sensitive data. You will collaborate closely with our team to ensure that our products, cloud environments, and AI integrations are built to industry security standards and best practices.”
• cryptographyThe ad says“Understanding of core security concepts — cryptography, authentication, authorization, security protocols, and vulnerability classes — as applied to web application and cloud service security”
• CSPMThe ad says“Perform daily security monitoring across cloud and infrastructure, spanning cloud security posture management (CSPM), SIEM and log analysis, cloud-native threat detection, database activity monitoring, and security orchestration, automation, and response (SOAR)”
• data-egress controlsThe ad says“Experience securing AI/LLM deployments in cloud environments — including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls”
• EC2The ad says“Hands-on experience securing AWS and GCP environments, including core services such as IAM, EC2, S3, VPC, and their GCP equivalents (IAM, Compute Engine, Cloud Storage, VPC)”
• GCPThe ad says“Own the security of our entire AWS and GCP environments — including IAM, compute, storage, networking, and workload configurations — hardening the footprint, enforcing baselines, and remediating misconfigurations and vulnerabilities across both clouds”
• guardrail designThe ad says“Assess and secure AI/LLM deployments and integrations — including Model Context Protocol (MCP) and other LLM connector requests — through threat modeling, guardrail design, and risk assessment prior to approval”
• IAMThe ad says“Own the security of our entire AWS and GCP environments — including IAM, compute, storage, networking, and workload configurations — hardening the footprint, enforcing baselines, and remediating misconfigurations and vulnerabilities across both clouds”
• incident managementThe ad says“Participate in incident management, change management, security policy management, and security incident response”
• input/output filteringThe ad says“Experience securing AI/LLM deployments in cloud environments — including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls”
• IP networking protocolsThe ad says“Solid grasp of IP networking protocols: IPv4/IPv6, TCP/UDP, DHCP, HTTPS, FTP, and similar”
• ISO 27001The ad says“Contribute to SOC 2, PCI DSS, and ISO 27001 compliance programs”
• log analysisThe ad says“Perform daily security monitoring across cloud and infrastructure, spanning cloud security posture management (CSPM), SIEM and log analysis, cloud-native threat detection, database activity monitoring, and security orchestration, automation, and response (SOAR)”
• MCPThe ad says“Hands-on assessment of MCP and LLM connector integrations against OWASP guidance — covering prompt injection, cross-connector chaining, OAuth scope minimization, tool-access boundaries, and untrusted-content handling”
• MITRE ATLASThe ad says“Working knowledge of AI security frameworks and standards: NIST AI RMF, OWASP LLM Top 10, OWASP guidance for MCP and agentic systems, and MITRE ATLAS”
• NIST AI RMFThe ad says“Working knowledge of AI security frameworks and standards: NIST AI RMF, OWASP LLM Top 10, OWASP guidance for MCP and agentic systems, and MITRE ATLAS”
• output validationThe ad says“Experience securing AI/LLM deployments in cloud environments — including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls”
• OWASP guidanceThe ad says“Hands-on assessment of MCP and LLM connector integrations against OWASP guidance — covering prompt injection, cross-connector chaining, OAuth scope minimization, tool-access boundaries, and untrusted-content handling”
• OWASP LLM Top 10The ad says“Working knowledge of AI security frameworks and standards: NIST AI RMF, OWASP LLM Top 10, OWASP guidance for MCP and agentic systems, and MITRE ATLAS”
• PCI DSSThe ad says“Contribute to SOC 2, PCI DSS, and ISO 27001 compliance programs”
• prompt-injection defenseThe ad says“Experience securing AI/LLM deployments in cloud environments — including deploying and hardening foundation models such as Claude on AWS (e.g., Amazon Bedrock) with guardrails, input/output filtering, prompt-injection defense, output validation, and data-egress controls”
• risk assessmentThe ad says“Assess and secure AI/LLM deployments and integrations — including Model Context Protocol (MCP) and other LLM connector requests — through threat modeling, guardrail design, and risk assessment prior to approval”
• S3The ad says“Hands-on experience securing AWS and GCP environments, including core services such as IAM, EC2, S3, VPC, and their GCP equivalents (IAM, Compute Engine, Cloud Storage, VPC)”
• security incident responseThe ad says“Participate in incident management, change management, security policy management, and security incident response”
• security policy managementThe ad says“Participate in incident management, change management, security policy management, and security incident response”
• SIEMThe ad says“Perform daily security monitoring across cloud and infrastructure, spanning cloud security posture management (CSPM), SIEM and log analysis, cloud-native threat detection, database activity monitoring, and security orchestration, automation, and response (SOAR)”
• SOARThe ad says“Perform daily security monitoring across cloud and infrastructure, spanning cloud security posture management (CSPM), SIEM and log analysis, cloud-native threat detection, database activity monitoring, and security orchestration, automation, and response (SOAR)”
• SOC 2The ad says“Contribute to SOC 2, PCI DSS, and ISO 27001 compliance programs”
• threat modelingThe ad says“Assess and secure AI/LLM deployments and integrations — including Model Context Protocol (MCP) and other LLM connector requests — through threat modeling, guardrail design, and risk assessment prior to approval”
• VPCThe ad says“Hands-on experience securing AWS and GCP environments, including core services such as IAM, EC2, S3, VPC, and their GCP equivalents (IAM, Compute Engine, Cloud Storage, VPC)”