AI Security Engineer

About the role

The AI Security Engineer will secure AI-enabled products and agent workflows by managing third-party model integrations. This role focuses on protecting customer data, designing agent permission controls, and ensuring robust data isolation across AI services.

Responsibilities

• Assess customer data sent to third-party model vendors including minimization and retention controls.
• Design controls limiting AI agent permissions and system access using least privilege principles.
• Implement and test tenant and user data isolation across prompts, conversation history, and memory.
• Threat model and test against prompt injection and indirect injection through untrusted inputs.
• Partner with Product and Engineering teams on safe document ingestion and content validation.
• Support technology risk assessments and regulatory control evidence for AI technology.
• Build security tests, monitoring, and response procedures for AI misuse and vendor incidents.

Required skills

• Application Security
• Product Security
• AI System Security
• LLM integrations
• Model APIs
• RAG
• Prompt injection
• Python
• TypeScript
• Node.js
• AWS
• GCP

Qualifications

• Degree in Computer Science, Cybersecurity, AI, or related field
• Equivalent practical experience

About the Company

BJAK is a leading insurance platform in Southeast Asia that provides mobile-first financial services including spending, saving, investing, and exchanging. Founded in 2019, the company operates with global teams across multiple countries to redefine financial applications.