Senior AI Information Security Engineer

Light & Wonder is a company that provides essential services across the enterprise, and they are seeking a Senior AI Information Security Engineer. This role involves leading the design, development, and deployment of agentic AI systems while ensuring security and compliance across the organization.

Responsibilities:

• Design, build, and own production-grade agentic AI systems — including multi-step agents, tool-using LLM pipelines, retrieval-augmented generation (RAG) workflows, and automated decision-making systems
• Develop and maintain the company’s internal agentic AI platform, including agent orchestration, memory management, tool integrations, and human-in-the-loop review workflows
• Identify high-value agentic use cases across business functions and deliver working solutions end-to-end, from requirements through deployment and monitoring
• Establish guardrails, safety patterns, and evaluation frameworks for agentic systems, including output validation, escalation logic, and auditability
• Implement and maintain security controls for AI tools and workflows: data handling, access controls, logging, monitoring, prompt injection mitigations, and acceptable-use enforcement
• Perform security reviews and threat modeling for LLM integrations, agentic workflows, APIs, and third-party AI/SaaS solutions
• Identify and mitigate AI-specific risks: sensitive data exposure, over-permissioned agents, insecure tool use, supply-chain exposure, and inadequate human oversight
• Support AI governance and compliance activities with technical guidance, architecture input, and implementation evidence
• Develop scripts, integrations, and lightweight applications using Python, PowerShell, REST APIs, and workflow automation platforms
• Build and maintain SIEM detections, SOAR playbooks, dashboards, and reporting capabilities, including telemetry for AI-enabled workflows
• Engineer security improvements across identity, cloud, SaaS, endpoint, and data protection domains
• Respond to security incidents involving AI tools, data exposure, and automation failures
• Translate business and control objectives into secure AI designs, prototypes, and production capabilities
• Manage and communicate project status, risk decisions, and implementation progress to stakeholders
• Maintain standard operating documentation for knowledge transfer, audit readiness, and disaster recovery

Requirements:

• Agentic AI development: agent frameworks (e.g., LangChain, AutoGen, CrewAI), LLM APIs, tool use, RAG, vector databases, prompt engineering, and safety guardrails
• Python development, REST APIs, and workflow automation; scripting in PowerShell or similar
• Security architecture across identity, cloud, SaaS, endpoint, network, application, and data protection
• SIEM management, log onboarding, detection engineering, and alert tuning
• SOAR platforms, ticketing integrations, and automated playbook development
• Bachelor's degree in Computer Science, Engineering, Cybersecurity, Data Science, or equivalent experience
• 5+ years in cybersecurity, security engineering, application security, or a related field
• 3+ years in security operations, security engineering, DevSecOps, or cloud security
• 2+ years of hands-on AI/ML development, agentic systems, automation, or data engineering
• Demonstrated ability to deliver cross-functional technical projects end-to-end
• Cloud and SaaS security: identity providers, CASB/SSE, DLP, key/secrets management
• Application and API security, vulnerability scanning, DevSecOps, and secure SDLC
• AI security and governance: NIST AI RMF, OWASP LLM Top 10, model risk, auditability, and policy enforcement
• SIEM/SOAR platforms, endpoint security, web application firewalls, and threat intelligence tooling
• ISO 27001, NIST CSF, privacy frameworks, and common risk management terminology
• CISSP, CISM, or CISA
• SANS GIAC (cloud, incident response, application security, or automation focus)
• Cloud security certifications (CCSK, CCSP, or major cloud provider)
• AI governance, ML security, or secure software development coursework or certification