Senior AI Information Security Engineer
About this role
The Information Security team at Tenable builds exposure management and cybersecurity solutions designed to help organizations understand and reduce cyber risk. This practitioner steps in to shape and mature the approach to securing artificial intelligence both within company products and across enterprise operations. Responsibilities center on designing end-to-end security controls for the AI and machine learning lifecycle, inspecting model internals to catch hidden deception, and establishing standards for responsible use.
Created to address the intersection of application security, cloud risk, and data governance introduced by modern machine learning models, the role demands hands-on AI engineering experience alongside deep product security skills. A strong candidate has spent time building with AI systems and looking under the hood of model internals, wanting to channel that background into a dedicated security specialty. Working closely with software engineers and product teams, the person in this position will help ship AI features securely while building tooling that raises the overall security posture.
What you will do
- Design, implement, and maintain end-to-end security controls across the AI and machine learning lifecycle.
- Conduct safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts.
- Perform threat modeling and safety assessments for AI systems to identify risks such as data poisoning and model extraction.
- Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, and emerging threat vectors.
- Collaborate with software and product teams to integrate security best practices into development and deployment processes.
- Create security guidance, documentation, and training for internal engineering and development teams.
What you need
- Possess 5 or more years of professional experience in information security or application security, with 1 to 2 years focused on securing AI and machine learning systems.
- Demonstrate a deep understanding of AI-specific security threats including adversarial machine learning, prompt injection, and model evasion.
- Bring strong coding experience in Python and/or Go along with familiarity with frameworks such as PyTorch or TensorFlow.
- Show experience using specialized interpretability and probing tools such as TransformerLens, Captum, or LIT.
- Understand the machine learning lifecycle, cloud security platforms, and secure software development lifecycle practices.
Nice to have
- Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments
- Familiarity with AI security frameworks and standards including OWASP LLM Top 10 and NIST AI RMF
- Experience with application security assessment tools like Burp Suite or Tenable WAS
- Background in cloud security or large-scale SaaS product environments
- Security certifications such as CISSP, CSSLP, or SANS GIAC
Benefits
- Medical, dental, vision, disability and life insurance
- 401(k) retirement savings with company match
- Employee stock purchase plan and employee referral program
- Education assistance, parental leave, and paid time off
- Company-paid holidays and flexible spending accounts
Skills and tech stack
Questions candidates ask
What is the location or remote policy for this role?
This position follows a hybrid setup with locations listed in Boston, Massachusetts and Columbia, Maryland.
What is the salary range for this position?
The base pay range for this position is $122,500 to $163,166.67 USD, with compensation depending on factors like qualifications, skills, and experience.
Is visa sponsorship available for applicants?
Applicants must be authorized to work for any employer in the U.S. without sponsorship, and the company is unable to provide work visa sponsorship of any kind at hire or during employment.