AI Security Engineer
Alpaca · Engineering · Mid · 10d ago
Open to candidates across Americas.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Open to candidates across Americas.
“Remote - Americas”
Team members span the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- Provides a $500 one-time home-office setup budget plus a $150 monthly stipend.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As an AI Security Engineer, you will define and maintain the technical security controls governing Alpaca's AI usage, including authentication for AI agents, least-privilege tool access, security guardrails, and telemetry. Reporting to the Enterprise Security Architect, you will partner closely with engineering, AI enablement, and GRC teams to integrate security into AI application designs, develop AI-driven security tooling, and assist in incident response and on-call rotations.
What you'll do
- Define identity, authentication, least-privilege access, and auditing requirements for AI agents, bots, and integrations.
- Design and implement guardrails, data handling policies, and technical security requirements for internal AI applications.
- Conduct security design reviews for new AI tools and integrations, advising teams on practical risk mitigation.
- Partner with Security Operations to develop AI-powered tooling and establish security telemetry for AI systems.
- Lead AI-specific investigation and response during security incidents and participate in the Security Operations on-call rotation.
- Collaborate with GRC to translate AI security standards into enforceable technical controls.
What you bring
- 2+ years of experience in security engineering, application security, or cloud security roles.
- Hands-on experience securing LLM applications, AI agents, or AI developer tools, and familiarity with OWASP Top 10 for LLM Applications.
- Solid understanding of identity and access controls for non-human identities, including OAuth, service accounts, and secrets management.
- Programming experience in Python or another general-purpose language.
- Experience with CI/CD security checks, cloud-native deployments, and security operations or incident response.
- Willingness to participate in a Security Operations on-call rotation.
About Alpaca
Alpaca is a developer-first financial infrastructure company providing brokerage APIs for trading stocks, crypto, options, and more to institutional clients worldwide. Backed by top-tier venture firms, Alpaca operates as a distributed team of over 400 people across dozens of countries.
View Alpaca profile & open roles →