Staff AI Security Engineer

About the company

Fortinet

Computer & network security · 10,001+ employees

What you'll do

• Serve as an AI security subject matter expert who provides guidance to internal teams
• Work closely with development teams, conduct code reviews, perform AI Red Teaming assessments, to identify vulnerabilities in existing codes and new features, and participate in architectural reviews to ensure security is considered early in the development lifecycle.
• Perform threat modeling for AI-related products, such as chatbots, MCPs implementations, and autonomous agents.
• Integrate Security and AI-Specific checks into CI/CD workflows to automate security testing and ensure consistent application of best practices.
• Develop, implement, and communicate vulnerability mitigation strategies
• Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security, safety and privacy are designed in Fortinet AI applications.
• Develop and maintain security guardrails, input/output filters, and policy enforcement layers for LLM interactions
• Proactively research new attack vectors on AI applications that may affect Fortinet applications and infrastructure.
• Be part of a global distributed team to share knowledge, workload and assignments. Strong sense of teamwork is required. Coach peers in AI/ML security concepts and best practices.
• 7+ years of work experience as an Information security, product security, application security, AI/ML or data science related fields.
• Strong understanding on LLM Based Application architectures, technologies, frameworks, and foundational concepts like training, vector databases, memory, tool usage, MCP, Agentic AI, Guardrails etc.
• Solid understanding on current attacks on ML models, including adversarial examples, prompt injection, training data extraction, model extraction, and data poisoning.
• Solid understanding on LLM moderation, prompt engineering and guardrails.
• Strong understanding on OWASP TOP 10 and OWASP LLM Top 10 risks.
• Strong understanding of common API security risks
• Strong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.
• Proven experience in manual application penetration testing
• Proven experience in security code review
• Strong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography
• Solid understanding on CI/CD pipelines, build systems and DevSecOps principles.
• Experience defining security architecture patterns and standards in a large enterprise organization.
• Experience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to AI Security
• Experience working with threat modeling methodologies such as STRIDE, MAESTRO etc.
• Solid understanding of OAuth and JWT implementations.
• Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teams
• A BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.
• MS or PhD in, Artificial Intelligence or related field
• Experience in AI Red teaming or adversarial testing of AI/ML applications.
• Use of AI in vulnerability research or some other offensive domain
• Experience analyzing AI-generated code for security issues
• Demonstrated experience in MLops or Deep learning related infrastructure
• Understanding of data science, statistical analysis, and visualization
• Background of AI Trust principles and familiarity with application of ethical and safety perspectives to AI implementations.
• Strong understanding on EU AI Act, GDPR, ISO 42001 or NIST AI RMF like frameworks.

Keywords for your resumePro

The words this employer's screening is likely to look for.