Senior AI Security Engineer
Summary
Build and embed AI-powered security tooling into CI/CD to automate code review, risk classification, and remediation for a health-focused AI platform.
Company Overview:
Role:
Key Responsibilities:
- Implement security controls for AI agents, tools, memory, and data access.
- Build agent identity, authorization, scoped credentials, least privilege permissions, and approval requirements.
- Apply secure patterns for context retrieval, member data isolation, and agent memory.
- Create evaluations for prompt injection, sensitive data disclosure, unsafe tool use, memory poisoning, and unauthorized actions.
- Turn discovered vulnerabilities into automated regression tests and release gates.
- Implement runtime safeguards for tool calls, network access, data egress, and resource use.
- Review agent tools, model integrations, and internal APIs for authorization, input validation, data exposure, and abuse risks.
- Build logging and monitoring that supports investigation without exposing sensitive health information.
- Perform threat modeling, manual assessment, and targeted adversarial testing of AI applications.
- Partner with engineers to remediate findings and improve product architecture.
- Contribute reusable security libraries, reference implementations, and engineering documentation.
- Support incident investigations involving AI systems or member data.
- Help improve and operationalize Function’s standards for secure AI development.
Qualifications/Skills:
- Five or more years of experience across software engineering, AI engineering, product security, application security, cloud security, or related disciplines.
- Production experience building or securing AI agents, machine learning systems, data platforms, or model integrated applications.
- Strong Python and backend engineering skills.
- Understanding of authentication, authorization, data isolation, secrets management, secure API design, and application security fundamentals.
- Experience with agent tools, retrieval, memory, evaluations, model integrations, or AI orchestration frameworks.
- Ability to identify practical attack paths and translate them into engineering controls and tests.
- Familiarity with cloud infrastructure, workload identity, containers, and service monitoring.
- Experience working directly with product and engineering teams.
- Clear written communication and the ability to document technical decisions.
To be a strong fit, you embody our Core Values:
- Ruthless Prioritization:
- We don’t let perfect get in the way of progress.
- We move quickly to drive value, not perfection.
- We prioritize what drives impact.
- We never compromise on standards of excellence.
- Member-First, Always:
- We design and deliver like we’re caring for someone we love.
- We create calendar, actionable, human experience.
- We prioritize responsiveness, peace of mind, and outcomes.
- We empower members with truth, clarity, and care.
- One Team, Moving Fast:
- We are aligned in purpose, prioritization, and speed.
- We gather diverse perspectives to make informed decisions.
- We clear paths for each other and move fast together.
- We communicate clearly and respectfully, rallying around shared goals.
- Radical Ownership, Relentless Execution:
- We don’t just ship– we own outcomes and drive results.
- We act with urgency and precision
- We anticipate, initiate, and follow through.
- We meet challenges with grit and pragmatism.
- We embrace new tech to deliver better outcomes.
- Mission Over Ego:
- We are ruthlessly aligned to our mission– and leave ego at the door.
- We disagree and commit.
- We don't tolerate politics or withholding information.
- We operate with honesty, transparency, and respect.
- Sustained Integrity in Every Detail:
- We earn trust by obsessing over accuracy, quality, and clarity in everything we do.
- We prioritize clinical precision– data must be right.
- We sweat the details because outcomes depend on them.