AI Security Engineer

About Us:

YipitData is the leading market research and analytics firm for the disruptive economy and recently raised up to $475M from The Carlyle Group at a valuation over $1B.

We analyze billions of alternative data points every day to provide accurate, detailed insights on ridesharing, e-commerce marketplaces, payments and more. Our on-demand insights team uses proprietary technology to identify, license, clean and analyze the data many of the world’s largest investment funds and corporations depend on.

For three years and counting, we have been recognized as one ofInc’s Best Workplaces. We are a fast-growing technology company backed by The Carlyle Group and Norwest Venture Partners. Our offices are located in NYC, Austin, Miami, Los Angeles (CA), Cupertino (CA),Hong Kong, Shanghai, Beijing, Guangzhou, and Singapore. We cultivate a people-centric culture focused on mastery, ownership, and transparency. About the Role:

We are seeking an AI Security Engineer to lead the implementation, monitoring, and continuous improvement of security, governance, and trust controls for AI systems across the organization. This role will focus on operationalizing AI system security controls using the Agentic Trust Framework mapped to OWASP guidance and the NIST AI RMF, with particular emphasis on observability engineering, behavioral monitoring, policy enforcement, misuse detection, and risk-informed response.

This person will serve as a bridge between Security, Engineering, Data, Platform, Compliance, and AI product teams to ensure AI systems are not only functional and performant, but also trustworthy, auditable, resilient, and aligned with enterprise governance requirements.

The ideal candidate combines technical depth in AI/ML systems, strong security and monitoring instincts, and the ability to define practical controls for complex, fast-evolving agentic and generative AI environments.

We expect U.S. based working hours with the majority of the team working East and Central Time Zones.

In this role, you will:

• Own AI behavior monitoring: Define what trustworthy and untrustworthy AI behavior looks like, and ensure it is measurable in production.
• Own AI observability standards: Establish telemetry, tracing, logging, and alerting requirements for AI systems and agentic workflows.
• Own control validation for agentic systems: Verify that guardrails, policy checks, access boundaries, and execution constraints are functioning as intended.
• Own AI security event analysis: Detect, investigate, and document suspicious, unsafe, or non-compliant AI behaviors and coordinate response.
• Own implementation support for governance frameworks: Translate governance principles into technical and operational requirements that product and platform teams can adopt.
• Own AI trust metrics and reporting: Define KPIs, KRIs, and dashboards that show leadership whether AI systems are operating within approved trust and security boundaries.
• Own continuous improvement of AI controls: Use incidents, testing, behavioral findings, and stakeholder feedback to strengthen control design and reduce residual risk over time.

You Are Likely To Succeed If:

• 5+ years of experience in one or more of the following: security engineering, detection engineering, observability engineering, site reliability engineering, application security, ML platform engineering, or AI governance implementation.
• Experience designing monitoring, logging, telemetry, or detection strategies for distributed systems, cloud services, or data-intensive applications.
• Familiarity with AI/ML system architecture, including large language models, retrieval-augmented generation, inference pipelines, model APIs, and agentic workflows.
• Experience translating governance, risk, or policy requirements into operational controls and measurable technical requirements.
• Strong understanding of security concepts such as identity and access management, least privilege, data protection, abuse prevention, auditability, and incident response.
• Experience investigating system behavior, identifying anomalies, and working cross-functionally to drive remediation.
• Hold industry certifications (or equivalent experience): CISSP, CCSP, GIAC Machine Learning Engineer (GMLE)
• Strong written communication skills, including ability to write standards, control definitions, runbooks, and leadership-facing summaries.

Preferred Qualifications:

• Experience with AI observability tooling, tracing frameworks, or telemetry pipelines for LLM or agent-based systems.
• Experience implementing controls for AI safety, AI red teaming, prompt security, model misuse detection, or secure tool execution.
• Familiarity with Microsoft security, compliance, and AI governance ecosystems.
• Familiarity with trust and safety concepts for generative AI and autonomous systems.
• Experience supporting internal governance, risk, privacy, or compliance review processes for AI-enabled products.
• Experience building dashboards, alerts, and behavioral analytics for security or operational monitoring.
• Experience working in highly regulated or audit-sensitive environments.

What We Offer:

• Our compensation package includes comprehensive benefits, perks, and a competitive salary:

  • We care about your personal life, and we mean it. We offer flexible work hours, flexible vacation, a generous 401K match, parental leave, team events, wellness budget, learning reimbursement, and more!
  • Your growth at YipitData is determined by the impact that you are making, not by tenure, unnecessary facetime, or office politics. Everyone at YipitData is empowered to learn, self-improve, and master their skills in an environment focused on ownership, respect, and trust. See more on our high-impact, high-opportunity work environment above!
  • The annual on-target earnings for this position is anticipated to be up to $230 ~ $280K. The final offer may be determined by a number of factors, including, but not limited to, the applicant's experience, knowledge, skills, abilities, as well as internal team benchmarks.
  The compensation package also includes equity.

This role may be performed fully remotely within the United States. Please note that our US headquarters are located in NYC. We also have have US offices in Austin, Miami, Los Angeles (CA), and Cupertino (CA). If the remote work is performed outside of these offices, income may be subject to New York State tax withholding.

Please note that for this position, we are not able to consider candidates who currently or in the future will require visa sponsorship.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal-opportunity employer.

Job Applicant Privacy Notice