[All remote jobs](https://jobicy.com/jobs.md)[![Rithum logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/fe3986d8-221-1.jpeg)](https://jobicy.com/company/rithum.md)[Rithum](https://jobicy.com/company/rithum.md) # Staff Information Security Engineer AI Summary Rithum is seeking a Staff Information Security Engineer to build and operationalize security controls for an AI-first commerce platform. The role combines cloud, application, identity, vendor-risk, and AI/LLM security, with emphasis on automated, policy-as-code controls and secure AI-agent workflows. The engineer will partner with Platform Engineering, IT, security champions, and auditors to translate security architecture into practical controls and remediation plans. Key work includes threat modeling LLM and agentic systems, integrating SIEM/CSPM/AppSec tooling with LLM workflows, and enforcing data, model-access, and prompt-injection protections.[Apply for this job](#job-application)[View company](https://jobicy.com/company/rithum.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 170k–220k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished6 Nov 2026Apply before6 Dec 2026Listing views36Application actions1Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. Rithum™ is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers, enabling them to accelerate growth, optimize operations across channels, scale product offerings and enhance margins. Today, more than 40,000 companies trust Rithum to grow their business across hundreds of channels, representing over $50 billion in annual GMV. Using our commerce, marketing, and delivery solutions, our customers create optimized consumer shopping journeys from beginning to end. Overview Rithum expects employees across all roles to leverage AI and technology to improve efficiency, streamline workflows, and create scalable ways of working. Rithum is embedding AI into every corner of how it operates — and security is no exception. As a Staff Information Security Engineer, you own the intersection of AI adoption and information security: designing guardrails for AI-powered products, building automated security tooling, designing security controls and monitoring for an AI-First workforce, helping every team at Rithum move fast without creating risk they cannot see. This is not a typical security role. You spend as much time building and automating as you do reviewing, turning a repeating control into infrastructure-as-code, a manual review into a workflow, and a vague AI risk into a concrete, enforced guardrails. You work autonomously, balancing research with fast-paced delivery, and collaborating closely with Platform Engineering, IT, Security Champions, and external auditors. Responsibilities * Act as the bridge between architectural intent and operational reality; mediate conflicts between security requirements and feasible implementation, propose compensating controls where gaps exist and help register, track and remediate residual risks. * Implement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code so security is enforced by design, including controls that govern how AI tools and models may be used. * Implement and enforce identity and access controls to an agreed standard, including access boundaries for AI systems and non-human/agent identities by partnering with Platform Engineering and IT to align tooling and policy to the architecture. * Assist in maintaining the InfoSec risk register; track emerging threats and translate them into actionable guidance for engineering teams. * Support third-party and vendor risk assessments, with a focus on vendors who process data through AI pipelines. * Automate repetitive security workflows (evidence collection, access reviews, alert enrichment) and build or operate AI-assisted security agents — with human-in-the-loop approval gates, least-privilege credentials, and explicit attention to each agent’s own blast radius. * Integrate security tooling (SIEM, CSPM, DAST/SAST, vulnerability scanners) with LLM layers to surface actionable insight and automated responses. * Define and enforce security requirements for AI-powered features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries. * Conduct threat modelling on agentic and LLM-based systems, accounting for novel attack surfaces such as tool misuse, indirect prompt injection, and supply chain risk. Qualifications Minimum Qualifications * 5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs, RAG). * Experience using AI tools (ChatGPT, Copilot, Claude, etc.) and LLM frameworks and APIs (OpenAI, Anthropic, LangChain, or similar) to accelerate and elevate your work. * Hands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities. * Infrastructure and policy-as-code (e.g. Terraform, OPA/Rego) and proficiency in a scripting language for automation (Python preferred). * Cloud security expertise: AWS Solutions Architect / Security Specialty or equivalent demonstrated expertise, including multi-account governance, preventive guardrails, and policy-as-code. * Application security (OWASP Top 10 and the OWASP LLM/GenAI Top 10, secure SDLC) and threat-modelling methodologies (STRIDE, PASTA, or equivalent). Practical experience building or operating AI agents, and integrating security tooling (SIEM, CSPM, SAST/DAST/SCA) so it surfaces action rather than raw alerts. * Working knowledge of SOC 2 and/or ISO 27001 control frameworks. Preferred Qualifications * Experience building or operating AI agents in a production environment. * Awareness of privacy regulation (GDPR/CCPA) as it touches AI including privacy-by-design and DPIAs. * Red teaming or adversarial ML research backgrounds. * Experience implementing privileged-access, key-management, posture-management, or data-protection programs. * Experience with EDR, CASB, DLP, Security automation and SAST, DAST, IAST and SCA tools. * Cloud Architecture or Security certifications (CCSK, TAISE, AWS). Travel Required Up to 10% Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. What it’s like to work at Rithum When you join Rithum, you can expect to work with smart risk-takers, courageous collaborators, and curious minds. As part of the Rithum team, you are valued, supported, and included. Guided by a transparent culture and accessible, approachable leadership, we offer career opportunities aligned to your ambitions and talents. To ensure work and life balance works for you, we also offer an array of resources to support you and your families, including comprehensive benefits and wellness plans. At Rithum you will: * Partner with the leading brands and retailers. * Connect with passionate professionals who will help support your goals. * Participate in an inclusive, welcoming work atmosphere. * Achieve work-life balance through remote-first working conditions, generous time off, and wellness days. * Receive industry-competitive compensation and total rewards benefits. We believe in transparency and fairness in our compensation practices. For this position, the expected base pay range is: $170,000-$220,000 per year. This range represents the base pay for the role across all U.S. locations and is determined based on market data, internal equity, and experience. Final compensation may vary depending on geographic location, skills, and relevant experience.In addition to base pay, we offer a discretionary bonus for non-sales roles, a comprehensive benefits package, and, where applicable, sales incentives. For this position, the expected discretionary bonus is 12% of the annual base salary. Benefits * Medical, dental and vision benefits: Affordable health care plans and company HSA contributions, starting on Day 1 * A 6% 401(k) match * Competitive time off package with 20 days of Paid Time Off, 9 Company-Paid holidays, 2 paid floating holidays, 7 paid sick days, 2 Wellness days, and 1 Paid Volunteer Day; at 3 years of service PTO increases to 22 days, and at 5 years it increases to 25 days * 12 weeks primary caregiver leave & 4 weeks secondary caregiver leave * Accident, critical illness, and hospital indemnity insurance * Pet insurance * Legal assistance and identity theft insurance plans * Life insurance 2x salary * Access to the Calm app and the Employee Assistance Program * $65/month Remote work stipend for internet * Culture and team-building activities * Tuition assistance * Career development opportunities * Charitable contribution match up to $250 per year Rithum is an equal opportunity employer. We are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other protected characteristic. All employment is decided on the basis of qualifications, merit, and business need. We’re committed to providing reasonable accommodations in accordance with the law for qualified applicants. If you require assistance during the interview process due to a medical condition or need support accessing our website or completing the application process, please reach out to us by completing the [Accommodations Request Form](https://forms.office.com/r/v1qDcUpHLw). Your comfort and accessibility are important to us, and we’re here to ensure a seamless experience as you explore opportunities with our team. Show more [Apply now >](https://jobicy.com/jobs/159389-staff-information-security-engineer-2.md) * ![Upload CV](data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI2NSIgaGVpZ2h0PSI2NSIgZmlsbD0ibm9uZSIgeG1sbnM6dj0iaHR0cHM6Ly92ZWN0YS5pby9uYW5vIj48ZyBjbGlwLXBhdGg9InVybCgjQSkiPjxwYXRoIGQ9Ik0wIDBINjVWNjVIMFYwWiIgZmlsbD0iIzAyOWFlYiIvPjxnIGZpbGw9IiNmZmYiIHN0cm9rZT0iI2ZmZiIgc3Ryb2tlLXdpZHRoPSIyIj48cGF0aCBkPSJNMzMuMDQ5IDE1LjQ1NGExLjQzIDEuNDMgMCAwIDAtMi4wOTcgMGwtNy41NzkgOC4xNDdhMS4zOCAxLjM4IDAgMCAwIC4wOSAxLjk3MyAxLjQ0IDEuNDQgMCAwIDAgMi4wMDgtLjA4OGw1LjEwOS01LjQ5MnYyMC42MWExLjQxIDEuNDEgMCAwIDAgMS40MjEgMS4zOTdjLjc4NSAwIDEuNDIxLS42MjUgMS40MjEtMS4zOTd2LTIwLjYxbDUuMTA5IDUuNDkyYTEuNDQgMS40NCAwIDAgMCAyLjAwOC4wODggMS4zOCAxLjM4IDAgMCAwIC4wOS0xLjk3M2wtNy41NzktOC4xNDZ6TTE2Ljc2OSAzOC40YzAtLjc3My0uNjItMS40LTEuMzg1LTEuNFMxNCAzNy42MjcgMTQgMzguNHYuMTAybC4yMTUgNi4yMjljLjIyMyAxLjY4LjcwMSAzLjA5NSAxLjgxMyA0LjIxOHMyLjUxIDEuNjA3IDQuMTcyIDEuODMzYzEuNi4yMTggMy42MzYuMjE4IDYuMTYuMjE4aDExLjI4bDYuMTYtLjIxOGMxLjY2Mi0uMjI2IDMuMDYxLS43MDkgNC4xNzItMS44MzNzMS41ODktMi41MzggMS44MTMtNC4yMThDNTAgNDMuMTEzIDUwIDQxLjA1NSA1MCAzOC41MDNWMzguNGMwLS43NzMtLjYyLTEuNC0xLjM4NS0xLjRzLTEuMzg1LjYyNy0xLjM4NSAxLjRsLS4xOSA1Ljk1OGMtLjE4MiAxLjM3LS41MTUgMi4wOTUtMS4wMjYgMi42MTJzLTEuMjI4Ljg1My0yLjU4MyAxLjAzOGMtMS4zOTUuMTktMy4yNDMuMTkzLTUuODkzLjE5M0gyNi40NjJjLTIuNjUgMC00LjQ5OC0uMDAzLTUuODkzLS4xOTMtMS4zNTUtLjE4NC0yLjA3Mi0uNTIxLTIuNTgzLTEuMDM4cy0uODQ0LTEuMjQyLTEuMDI2LTIuNjEyYy0uMTg3LTEuNDEtLjE5MS0zLjI3OS0uMTkxLTUuOTU4eiIvPjwvZz48L2c+PGRlZnM+PGNsaXBQYXRoIGlkPSJBIj48cGF0aCBmaWxsPSIjZmZmIiBkPSJNMCAwaDY1djY1SDB6Ii8+PC9jbGlwUGF0aD48L2RlZnM+PC9zdmc+) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightЭто senior/staff-роль с высокой технической сложностью: требуется одновременно глубокая экспертиза в cloud security, IAM, AppSec и новых рисках LLM/agentic systems. Работа предполагает самостоятельное проектирование контролей, автоматизацию и согласование компромиссов между требованиями безопасности и скоростью разработки. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$195,000US market range (per year)$175k–$240k0$264k AI insightРаботодатель прямо указывает годовой диапазон базовой оплаты $170,000–$220,000 USD; медиана диапазона составляет $195,000 в год. Оценочный рыночный диапазон для Staff Information Security Engineer с AI/LLM security специализацией в США составляет $175,000–$240,000 USD в год. Дискреционный бонус 12% не включён в базовую зарплату. ## Core skills Skills and capabilities most closely associated with this opportunity. [AI security](https://jobicy.com/jobs?search_keywords=AI%20security.md)[LLM security](https://jobicy.com/jobs?search_keywords=LLM%20security.md)[Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Identity and access management](https://jobicy.com/jobs?search_keywords=Identity%20and%20access%20management.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[OPA/Rego](https://jobicy.com/jobs?search_keywords=OPARego.md)[Python automation](https://jobicy.com/jobs?search_keywords=Python%20automation.md)[Threat modeling](https://jobicy.com/jobs?search_keywords=Threat%20modeling.md)[Application security](https://jobicy.com/jobs?search_keywords=Application%20security.md)[SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md)[CSPM](https://jobicy.com/jobs?search_keywords=CSPM.md)[SAST/DAST](https://jobicy.com/jobs?search_keywords=SASTDAST.md)[Vendor risk management](https://jobicy.com/jobs?search_keywords=Vendor%20risk%20management.md)[SOC 2](https://jobicy.com/jobs?search_keywords=SOC%202.md) Sample interview questionsHow would you design security guardrails for an internal LLM application that can access company documents?I would begin with data classification, approved-use cases, and a threat model covering prompt injection, excessive data exposure, tool misuse, and identity abuse. I would enforce least-privilege retrieval permissions, document-level authorization, input/output filtering, audit logging, and human approval for sensitive actions. I would also establish continuous red-team testing and measurable control effectiveness metrics. Describe how you would automate access reviews for human and non-human identities. I would inventory identities and their entitlements from IAM, cloud, SaaS, and service-account systems, then normalize ownership, privilege level, and last-use data. A workflow would route periodic certifications to accountable owners, automatically revoke stale or unapproved access, and create exceptions with expiration dates. All actions would be logged for audit evidence and reviewed through risk-based reporting. What controls would you use to reduce prompt-injection risk in an AI agent with tool access? I would separate untrusted content from system instructions, constrain tool permissions with scoped credentials, validate tool arguments against strict schemas, and require approval gates for consequential actions. The agent should treat retrieved data as content rather than instructions, operate with a limited action allowlist, and log its reasoning inputs and tool calls. I would test direct and indirect injection scenarios continuously before and after release. How do you balance a security requirement that engineering considers impractical? I first clarify the underlying risk, affected assets, and required assurance level rather than defending a control implementation by default. I work with engineering to identify feasible alternatives, such as compensating monitoring, segmented rollout, tighter identity boundaries, or time-limited exceptions. I document the residual risk, accountable owner, expiration date, and remediation plan so the decision is transparent and measurable. How would you integrate SIEM, CSPM, and application-security findings into an actionable workflow? I would normalize findings into a common risk model using asset criticality, exploitability, identity exposure, internet reachability, and business context. Automation would deduplicate alerts, enrich them with ownership and remediation guidance, and open prioritized tickets with SLAs. For well-understood low-risk cases, I would automate containment or remediation; high-impact actions would use human-in-the-loop approval. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg) Samsara Nov 6 New ### [Security Operations Engineer](https://jobicy.com/jobs/159442-security-operations-engineer.md) Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of… * ![hims & hers logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/11/e7b9b920-221.jpeg) hims & hers Nov 6 New ### [Sr. Application Security Engineer](https://jobicy.com/jobs/159371-sr-application-security-engineer.md) Hims & Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of better health. We are redefining healthcare by… * ![Spotify logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210328105941-289246.jpg) Spotify Nov 6 New ### [Security Engineer – Product Security](https://jobicy.com/jobs/159248-security-engineer-product-security.md) The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines,… * ![Roofr logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/03/1a4a90db-221.jpg) Roofr Nov 6 New ### [Senior Security Engineer](https://jobicy.com/jobs/159233-senior-security-engineer-2.md) At Roofr, we’re obsessed with our customers. We constantly gather feedback to shape, prioritize, and launch the products they truly need. That’s what makes Roofr’s CRM special. We started by… * ![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png) Five9 Nov 6 New ### [Cloud Governance Engineer](https://jobicy.com/jobs/154675-cloud-governance-engineer.md) Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values… * ![Abby Care logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/3d3ea8fe-221.jpeg) Abby Care Nov 6 New ### [Senior Security Analyst](https://jobicy.com/jobs/154692-senior-security-analyst.md) About Abby Care: Powering the future of care at home for all of America. Abby Care is building the leading AI-native platform for family-led care. America is facing a growing… * ![NetBox Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/df239a55-221.png) NetBox Labs Nov 5 New ### [Security Architect](https://jobicy.com/jobs/159190-security-architect.md) NetBox Labs builds NetBox, the open source network source of truth, and the cloud and enterprise products built on it. We’re hiring a hands-on Security Architect: a builder unleashed by… * ![Spotify logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210328105941-289246.jpg) Spotify Nov 5 New ### [Staff Engineer – Identity and Access Management User Platform](https://jobicy.com/jobs/159119-staff-engineer-identity-and-access-management-user-platform.md) The Platform mission creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines,… * ![Keyfactor, Inc. logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/ba8ae349-221.png) Keyfactor, Inc. Nov 5 New ### [Senior Solutions Consultant](https://jobicy.com/jobs/159061-senior-solutions-consultant-3.md) About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world’s largest enterprises… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 5 New ### [Blockchain Security Expert – AI Track](https://jobicy.com/jobs/152451-blockchain-security-expert-ai-track.md) About the Company CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over… [Browse all jobs](https://jobicy.com/jobs.md)