Senior AI Information Security Engineer

Tenable is hiring a Senior AI Information Security Engineer to mature its approach to securing AI in its products and across the enterprise. The role designs and implements AI security controls, conducts safety assessments and threat modeling, and helps engineering teams develop and deploy AI features securely.

Responsibilities:

• Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle
• Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology
• Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks
• Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models
• Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs
• Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments
• Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses
• Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores
• Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors
• Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks
• Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes
• Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation
• Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes
• Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives

Requirements:

• Applicants must be authorized to work for any employer in the U.S. without sponsorship
• 5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems
• Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks
• Strong coding experience in Python and/or Go
• Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar
• Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool)
• Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution
• Strong understanding of the ML/AI lifecycle and the security risks associated with each stage
• Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services
• Knowledge of data security principles, including encryption, masking, and tokenization
• Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling
• Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices
• Ability to work cross-functionally across engineering, product, and business teams
• Strong written and verbal comAAmunication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences
• Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership
• Self-motivated and effective working independently and across distributed teams
• Master's Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred
• Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments
• Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework
• Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc)
• Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc.)
• Background in cloud security or large-scale SaaS product environments
• Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary