Lead AI Security Engineer
We are seeking a Lead AI Security Engineer to secure enterprise microservices APIs across web and mobile environments. You will partner with engineering and business stakeholders to improve security and observability using AI-driven detection and automation.
Responsibilities
- Implement security controls for web applications, APIs, microservices, and AI-enabled services
- Design observability for microservice REST and GraphQL APIs and critical application workflows
- Leverage AI and automation to analyze telemetry, logs, and security events to detect and investigate issues
- Identify and mitigate risks related to exposed endpoints and publicly accessible services
- Coordinate with application teams, product owners, and business stakeholders to validate workflows and resolve issues
- Communicate risks, mitigation plans, and recovery status to technical and business audiences
- Develop operational runbooks and troubleshooting procedures for recurring endpoint and API issues
Requirements
- 5+ years of experience securing APIs, web applications, and service-to-service communications
- Experience with microservices, REST APIs, GraphQL, and event-driven architectures
- Experience in AI Security and LLM application security testing, including agentic platforms
- Lead-level experience partnering with application teams and business stakeholders to drive remediation
- Strong project ownership skills to triage events and deliver secure solutions end to end
- Strong observability design skills using logs, traces, metrics, and event streams
- Strong automation and scripting skills to analyze telemetry, logs, and security events
- Strong risk assessment skills for exposed endpoints and publicly accessible services
- Strong communication skills to present findings and mitigation plans to technical and business audiences
- English proficiency at B2 (Upper-Intermediate)
Nice to have
- Akamai Application Security experience, including API Security or Bot Manager
- Dynatrace experience for logs, traces, metrics, and event streams
- Grafana experience for dashboards and alerting
- Langfuse experience for observability and telemetry analysis
- Splunk experience for log analytics and security event investigations
