Назад
Company hidden
5 дней назад

AI Security Engineer (AI)

Формат работы
remote (только China)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
China
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
AI Security Engineer (AI): Securing AI-enabled financial products and agent workflows with an accent on third-party model risks, data isolation, agent permissions, and prompt injection. Focus on threat modeling untrusted content, implementing security controls and tests, and supporting SC TRM and BNM RMiT compliance.

Location: Remote, China; address in Beijing, China

Company

A financial technology company operating a mobile-first insurance platform and expanding into spending, saving, investing, exchanging, and travel services across Southeast Asia.

What you will do

  • Assess customer data shared with third-party model vendors, including minimization, retention, logging, vendor controls, and approved use.
  • Design least-privilege controls for AI agent permissions, tools, actions, and system access.
  • Implement and test tenant and user data isolation across prompts, conversation history, retrieval, memory, and connected services.
  • Threat model and test direct and indirect prompt injection through uploaded documents, retrieved content, links, and other untrusted inputs.
  • Partner with Product, Legal, Compliance, Data, and Engineering on document ingestion, content handling, output validation, and sensitive-action approvals.
  • Build security tests, monitoring, and incident response procedures for AI misuse, data exposure, unauthorized actions, and vendor incidents.

Requirements

  • Degree in Computer Science, Cybersecurity, AI, or a related field, or equivalent experience.
  • At least 3 years of experience in application security, product security, security engineering, or AI system security.
  • Experience implementing or owning SC TRM and BNM RMiT controls, technology risk processes, or regulatory control evidence.
  • Understanding of third-party LLM integrations, model APIs, agent tools, RAG, and AI application architectures.
  • Knowledge of prompt injection, indirect injection, cross-user data leakage, excessive agent permissions, and vendor data disclosure risks.
  • Programming or scripting skills, preferably Python and TypeScript/Node.js, plus API and AWS or GCP experience. Strong English communication is required.

Culture & Benefits

  • Remote work arrangement in China.
  • Global teams spanning more than 20 nationalities and working from offices and remotely.
  • English is the main working language across global teams.
  • Opportunity to build next-generation financial products and AI-enabled services.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →