Principal AI Security Engineer

Cerebras Cerebras · Semiconductors · Office, US and Canada Offices · Remote · Security & IT

Principal AI Security Engineer to lead hands-on security engineering for enterprise IT, infrastructure, AI platforms, and agentic systems. This role involves designing and building security controls for systems supporting training, inference, model serving, customer workloads, and AI-assisted development, with a focus on turning ambiguous AI and platform security risks into practical architecture and reusable controls.

What you'd actually do

  1. Define security architecture and build controls for AI platforms, training and inference workflows, model-serving systems, customer workloads, developer workflows, and agentic
  2. Develop reusable AI and agent security patterns for identity, authorization, delegated authority, scoped tool access, MCPs, connectors, secrets, approvals, isolation, auditability, and
  3. Design runtime controls that constrain execution, access, data exposure, model and tool interaction, and blast radius.
  4. Build security capabilities as code using infrastructure as code, configuration as code, policy as code, GitOps, CI/CD, and automated validation.
  5. Define secure development patterns for AI systems, agents, prompts, tools, models, policies, evaluations, releases, and rollback.

Skills

Required

  • 10+ years of experience in security engineering, platform security, infrastructure security, product security, or related technical security roles.
  • Strong hands-on engineering ability in Python
  • Experience designing, building, operating, and improving security controls as code
  • Strong cloud and infrastructure security experience, preferably with AWS, including IAM, networking, secrets management, logging, and cloud-native control planes.
  • Deep understanding of identity and access systems, including SSO, MFA, OAuth, service accounts, workload identity, authorization, privileged access, and least privilege.
  • Practical experience securing runtime environments such as containers, Kubernetes, isolated workloads, secure development environments, distributed compute platforms, or production service infrastructure.
  • Ability to reason about cross-system risk involving identity, data, models, tools, networks, workflows, approvals, and automation.
  • Strong written communication skills and the ability to influence senior technical stakeholders across Security, Product, IT, Infrastructure, and Engineering.

Nice to have

  • Familiarity with AI security, LLM application security, agentic workflows, MCPs, prompt injection, autonomous coding agents, or AI platform security.
  • Experience with at least one additional production programming language besides Python.
  • AI, ML, training, inference, model-serving, or large-scale compute
  • Coding agents, agent platforms, MCP servers, internal developer platforms, or AI-assisted development environments.
  • Workload identity, secrets brokers, token brokers, short-lived credentials, privileged access, or zero-standing-privilege architectures.
  • Policy-as-code, authorization services, runtime enforcement layers, or security control
  • Software delivery security, including source control, CI/CD, build systems, artifacts, provenance, signing, and release gates.
  • Detection, investigation, and response workflows for cloud, infrastructure, identity, AI, or agent

What the JD emphasized

  • hands-on security engineering
  • AI platforms
  • agentic systems
  • security controls
  • training
  • inference
  • model serving
  • customer workloads
  • developer workflows
  • AI security
  • LLM application security
  • agentic workflows
  • MCPs
  • prompt injection
  • autonomous coding agents
  • AI platform security
  • identity
  • data
  • models
  • tools
  • networks
  • workflows
  • approvals
  • automation
  • security architecture
  • safer identity and authorization models
  • scoped tool access
  • runtime containment
  • secure software delivery paths
  • automated policy validation
  • high-signal telemetry
  • controls that engineering teams can adopt by default

Other signals

  • AI security engineering
  • agentic systems security
  • security controls for AI platforms
  • runtime controls for AI execution
  • secure development patterns for AI systems