The AI Security Engineer is a hands-on technical role dedicated to securing the AI systems, models, and pipelines that power Vertex's products. This role partners with product engineering, platform, governance, and information security teams to identify, assess, and mitigate risks that are unique to large language models, retrieval-augmented generation, agentic workflows, and the broader AI supply chain.
As a member of the AI Security organization, this role owns the applied AI security practice building the tooling, threat models, red team exercises, and developer guidance that enable Vertex to ship AI-powered features safely and responsibly. The AI Security Engineer operates at the intersection of offensive research, defensive engineering, and policy, translating the rapidly evolving AI threat landscape into concrete, measurable controls.
Key Responsibilities
Perform threat modeling and security reviews of AI features, including LLM-enabled applications, RAG systems, inference pipelines, and agentic workflows.
Analyze AI systems to identify, characterize, and prioritize security vulnerabilities.
Ensure AI actions are fully traceable using industry-standard identity, security, and logging frameworks.
Perform hands-on testing and develop automated red teaming for AI and agentic features, especially focused on AI specific risks like prompt injection.
Document reproducible failure modes and partner with engineering teams to implement and verify durable mitigations.
Build or extend AI security automation and evaluation harnesses.
Define how AI agents coordinate, delegate, and escalate within security workflows.
Work with engineering to define secure-by-default patterns and guidance for AI system design, development, prompts, retrieval, tool use, output handling, deployment, logging, and least-privilege agents.
Monitor emerging AI threats, frameworks, and platform changes, and convert relevant risks into prioritized controls and mitigations.
Drive effective and secure use of AI development tooling.
Guide developers on security and privacy best practices for agentic coding, using MCP-enabled tools and hooks to help prevent vulnerabilities.
Preemptively identify and resolve technical risks and cross-team dependencies to keep AI security work on track.
Collaborate proactively with defensive security teams to enhance detection, response, and mitigation capabilities.
Act as the AI security incident SME, providing rapid triage guidance and root-cause analysis.
Required Qualifications
5+ years of experience in security engineering, application security, product security, AI/ML engineering, or security architecture, with direct hands-on experience securing AI/ML or LLM-based systems.
Demonstrated ability to independently lead security reviews for complex software or AI systems and drive mitigation plans across engineering teams with limited oversight.
Practical experience assessing AI-specific risks such as prompt injection, insecure output handling, sensitive data exposure, excessive agency, model or data supply chain weaknesses, agent/tool abuse, and unsafe retrieval or memory patterns.
Advanced understanding of AI system behavior, including the ability to reason about model behavior, AI system vulnerabilities, evaluation results, and security-relevant failure modes.
Proficiency in Python (or similar) for building security automation, evaluation scripts, test harnesses, prototypes, and evidence-collection workflows.
Working knowledge of modern AI technology stacks, model APIs, orchestration frameworks, vector databases, retrieval pipelines, agentic workflows, and at least one major cloud platform (AWS, GCP, or Azure).
Familiarity with AI security and governance frameworks such as OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and ISO/IEC 42001.
Excellent written and verbal communication skills, with the ability to explain complex AI security risks to both technical and non-technical audiences.
Preferred Qualifications
Advanced degree in Computer Science, Engineering, or a related field; equivalent combination of education, training, and relevant professional experience accepted in lieu of a formal degree.
Experience leading AI red team engagements, AI test-and-evaluation activities, secure AI design reviews, or product security programs across multiple teams.
Experience deploying, integrating, or securing AI/ML systems used by customers or production engineering teams outside of a lab environment.
Hands-on experience with AI security tooling, model scanning, or custom evaluation harnesses.
Background in cloud security, IAM, application security, data protection, logging/monitoring, incident response, or security operations for production systems.
Experience coordinating practical technical work across product, platform, and security stakeholders.
External contributions, presentations, or publications in AI security, adversarial AI, AI assurance, or secure AI engineering.
Drives production outcomes through agentic, systems-level design, AI-augmented development, autonomy, mentorship, and clear communication.
Other Qualifications
The Winning Way behaviors that all Vertex employees need in order to meet the expectations of each other, our customers, and our partners.
COMMENTS:
The above statements are intended to describe the general nature and level of work being performed by individuals in this position. Other functions may be assigned, and management retains the right to add or change the duties at any time.
Pay Transparency Statement:
Base pay offered to new hires may vary based upon factors including relevant industry and job-related skills and experience, geographic location, and business needs.* The range displayed does not encompass the full potential of the role, which allows for further growth and career progression.
In addition, as a part of our total compensation package, this role may be eligible for the Vertex Bonus Plan (VOB), a role-specific sales commission/bonus, and/or equity grants.
Learn more about Life at Vertex and connect with your recruiter for more details regarding Vertex's compensation and benefit programs.
*In no case will your pay fall below applicable local minimum wage requirements
The rapid changes taking place in today’s global business, technology, and regulatory environments are having a compounding effect on the complexity of indirect tax management and putting more pressure on the corporate tax function than ever before. This complexity demands intelligent solutions that enable businesses to satisfy tax obligations and support growth opportunities.
The Trusted Leader in Tax Technology
We're Vertex (VERX). A pioneer in tax automation for more than 40 years. We proudly serve over 4,000 customers worldwide with distinction and provide comprehensive tax solutions that enable global businesses to transact, comply and grow with confidence.
Our software, content and services address the increasing complexities of global commerce and compliance by reducing friction, enhancing transparency and enabling greater confidence in meeting indirect tax obligations. As a result, our software is ubiquitous within our customers’ business systems, touching nearly every line item of every transaction that an enterprise can conduct. Our software is fueled by over 300 million data-driven effective tax rules and supports indirect tax compliance in more than 19,000 jurisdictions worldwide.
We partner with the world’s most respected companies and harness their strengths to deliver the best tax technology solution to businesses across the globe. We integrate with key technology partners that span ERP, CRM, procurement, billing, POS and e-commerce platforms. We also work closely with over 50 tax, accounting and consulting firms to provide the integrated tax technology solutions.
Our culture is the foundation of everything we do, guided by a common purpose to build trusted relationships at work, in business and in our communities. We strive to be a values-driven employer of choice who attracts, retains and inspires talented professionals to achieve their full potential. We employ over 1,100 full-time professionals today in the US, Europe and Brazil.
