AI Security Engineer
Alpaca · Remote - Americas
About this role
**AI Security Engineer** **Who We Are** Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. We’re a licensed financial services company serving hundreds of financial institutions across 40 countries with institutional-grade APIs—supporting broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges (10M+ brokerage accounts). **Your Role** Own the technical security controls for how Alpaca uses AI. This includes: - Identity for AI agents and automations - Security requirements for AI tools and integrations - Guardrails - Security logging/visibility - Helping develop AI-powered security tooling You’ll keep controls consistent as AI adoption grows and partner with teams building with AI so security is part of the design. This role reports to the Enterprise Security Architect and works closely with AI Enablement, Engineering, DevOps, GRC, and the wider Security team (Security is 100% distributed/remote). --- ## Things You Get To Do ### AI Identity and Access Controls - **Agent Identity:** Define how AI agents/bots/automations authenticate, what they can access, and how actions are attributed and audited. - **Tool Access:** Own security requirements for AI tool integrations (least privilege, credential handling). - **AI Assistant Controls:** Define/enforce security settings for approved AI tools (data handling + access policy). - **Least Privilege:** Limit access to what’s needed and review access when integrations change. ### Secure AI Platform, Tooling, and Response - **Security Requirements:** Define security requirements for internal AI applications (identity, data handling, secrets, integration review). - **Guardrails:** Design and implement guardrails for AI applications and agents. - **Design Reviews:** Review new AI applications/integrations for security risks and provide clear requirements. - **Security Tooling:** Support Security Operations with AI-powered tooling for detection, investigation, and response. - **Safe Use in Security:** Apply the same identity/data/logging requirements to security team AI tools. - **Telemetry Requirements:** Define required security logging and partner with Security Ops on detection. - **Approved Use:** Maintain visibility into AI tool usage and confirm approved configurations are followed. - **Incident Support:** Lead AI-specific aspects of incidents (agent misuse, data exposure via AI tools). - **On-Call:** Participate in the Security Operations on-call rotation after onboarding. ### Governance - **Standards:** Turn AI security standards into technical controls. - **GRC Partnership:** Partner with GRC on AI governance and provide technical evidence for control design. --- ## Who You Are (Must-Haves) - Excited about Alpaca’s mission and what we’re building - 2+ years in security engineering, application security, or cloud security - Hands-on experience securing LLM applications, AI agents, or AI developer tools - Understanding of AI-specific risks (e.g., prompt injection, data leakage, excessive agency, insecure tool use—e.g., OWASP Top 10 for LLM Applications) - Experience with identity/access controls for services and non-human identities (OAuth, service accounts, secrets management) - Programming experience in Python (or another general-purpose language) - Experience with CI/CD security checks and cloud-native deployments - Experience with security operatio
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.