AI Security Engineer

About the role

YipitData is the leading market research and analytics firm for the disruptive economy and recently raised up to $475M from The Carlyle Group at a valuation over $1B. We analyze billions of alternative data points every day to provide accurate, detailed insights on ridesharing, e-commerce marketplaces, payments and more. Our on-demand insights team uses proprietary technology to identify, license, clean and analyze the data many of the world's largest investment funds and corporations depend on. For three years and counting, we have been recognized as one of Inc's Best Workplaces . We are a fast-growing technology company backed by The Carlyle Group and Norwest Venture Partners. Our offices are located in NYC, Austin, Miami, Los Angeles (CA), Cupertino (CA), Hong Kong, Shanghai, Beijing, Guangzhou, and Singapore. We cultivate a people-centric culture focused on mastery, ownership, and transparency. About the Role: We are seeking an AI Security Engineer to lead the implementation, monitoring, and continuous improvement of security, governance, and trust controls for AI systems across the organization. This role will focus on operationalizing AI system security controls using the Agentic Trust Framework mapped to OWASP guidance and the NIST AI RMF, with particular emphasis on observability engineering, behavioral monitoring, policy enforcement, misuse detection, and risk-informed response. This person will serve as a bridge between Security, Engineering, Data, Platform, Compliance, and AI product teams to ensure AI systems are not only functional and performant, but also trustworthy, auditable, resilient, and aligned with enterprise governance requirements. The ideal candidate combines technical depth in AI/ML systems, strong security and monitoring instincts, and the ability to define practical controls for complex, fast-evolving agentic and generative AI environments. We expect U.S. based working hours with the majority of the team working East and Central Time Zones. In this role, you will : Own AI behavior monitoring: Define what trustworthy and untrustworthy AI behavior looks like, and ensure it is measurable in production. Own AI observability standards: Establish telemetry, tracing, logging, and alerting requirements for AI systems and agentic workflows. Own control validation for agentic systems: Verify that guardrails, policy checks, access boundaries, and execution constraints are functioning as intended. Own AI security event analysis: Detect, investigate, and document suspicious, unsafe, or non-compliant AI behaviors and coordinate response. Own implementation support for governance frameworks: Translate governance principles into technical and operational requirements that product and platform teams can adopt. Own AI trust metrics and reporting: Define KPIs, KRIs, and dashboards that show leadership whether AI systems are operating within approved trust and security boundaries. Own continuous improvement of AI controls: Use incidents, testing, behavioral findings, and stakeholder feedback to strengthen control design and reduce residual risk over time. You Are Likely To Succeed If: 5+ years of experience in one or more of the following: security engineering, detection engineering, observability engineering, site reliability engineering, application security, ML platform engineering, or AI governance implementation. Experience designing monitoring, logging, telemetry, or detection strategies for distributed systems, cloud services, or data-intensive applications. Familiarity with AI/ML system architecture, including large language models, retrieval-augmented generation, inference pipelines, model APIs, and agentic workflows. Experience translating governance, risk, or policy requirements into operational controls and measurable technical requirements. Strong understanding of security concepts such as identity and access management, least privilege, data protection, abuse prevention, auditability, and incident response. Experience investigating system behavior, identifying anomalies, and working cross-functionally to drive remediation. Hold industry certifications (or equivalent experience): CISSP, CCSP, GIAC Machine Learning Engineer (GMLE) Strong written communication skills, including ability to write standards, control definitions, runbooks, and leadership-facing summaries.