IT Security Engineer

Key Responsibilities: The selected resources will provide immediate execution capacity across ERD reviews, Threat Modeling, and third-party AI Agent security testing.

Core responsibilities include: Conduct security and privacy design reviews of services, applications, APIs, engineering proposals, and AI integrations; evaluate architecture, data flows, access controls, trust boundaries, and proposed safeguards. Perform threat modeling for critical services and AI agents, identifying attack surfaces, threat scenarios, potential attack paths, mitigations, and residual risk. Assess third-party AI agents through hands-on adversarial security testing, including prompt injection, tool misuse, data access, permissions, external integrations, excessive agency, and sensitive-data exposure. Document actionable findings, risk assessments, supporting evidence, and practical remediation guidance; partner with engineering and security teams through remediation and validation. Support repeatable security assessment processes, including review checklists, threat models, test cases, reporting templates, and AI-assisted/automation workflows where appropriate.