We are seeking an experienced AI Data Security Engineer to lead efforts in securing the organization’s data and infrastructure against risks arising from both internal and external use of artificial intelligence. This role will focus primarily on protecting company and customer data from misuse, leakage or exposure through internal AI tools, while also addressing emerging threats from external AI-driven attacks and adversarial models.
This position is ideal for a hands-on security professional who understands the intersection of AI/ML systems, data governance, and enterprise security as a function of risk. The role will be responsible for developing and maintaining pragmatic controls and guardrails that enable innovation while ensuring compliance and data protection.
Responsibilities
Internal AI Security (≈70%)
- Develop and implement AI governance and security controls to prevent sensitive data exposure through internal AI tooling (e.g., ChatGPT Enterprise, Copilot, GitHub Copilot, and other LLM-integrated systems).
- Establish policies, guardrails, and data classification enforcement for prompt inputs and outputs across all AI-enabled workflows.
- Monitor and assess AI tool usage across departments to identify policy violations, data leakage risks or unapproved AI integrations.
- Collaborate with Engineering, IT, and Legal to ensure compliance with SOC2, NIST CSF, PCI-DSS, and data privacy regulations (e.g., GDPR, CCPA) in the context of AI data processing.
- Develop and maintain a secure AI development environment for internal data science and ML projects.
- Support red-teaming and testing of internal AI models to identify vulnerabilities, prompt injection, data exfiltration or model inversion risks.
External AI Threat Protection (≈30%)
- Identify and mitigate AI-driven external threats, including model-based phishing, deepfake, data poisoning and automated attack tooling.
- Work with the security operations and incident response teams to detect and respond to AI-generated or AI-assisted attacks.
- Contribute to the organization’s threat intelligence program with a focus on emerging AI risks.
- Evaluate and test AI-specific security solutions, including model monitoring, output filtering and anomaly detection tools.
- 5+ years of experience in information security or application security, with 1–2 years in AI/ML or data security domains.
- Strong understanding of data governance, DLP and security controls for SaaS and cloud environments (AWS preferred).
- Familiarity with AI model architectures, data pipelines and risks such as prompt injection, data leakage and model exploitation.
- Experience implementing security frameworks (e.g., NIST CSF, ISO 27001, SOC 2, or PCI DSS).
- Strong collaboration skills and ability to communicate complex security concepts to non-technical stakeholders.
Preferred
- Experience with AI/ML tooling security (e.g., OpenAI, Anthropic, Azure OpenAI or Google Vertex AI).
- Knowledge of secure model development lifecycle (SDLC for AI) and MLOps practices.
- Demonstrated experience building or integrating AI governance and monitoring systems.
- Relevant certifications (e.g., CISSP, CCSK, or AI-specific credentials such as ISACA AAISM or CAISP).
Why Join Us?:
- Competitive salary and benefits with growth-company options grant
- Fast- paced and professional work culture
- Stock options with standard startup vesting - 1 year cliff; 4 years total
- $50 monthly communication expense stipend to go towards your phone/internet bill
- $250 stipend to enhance your WFH setup
- Reimbursement for peripheral equipment: monitor (up to $400), keyboard and mouse (up to $200)
- Premium medical benefits including vision and dental (100% coverage for employees)
- Company-sponsored life and disability insurance
- Paid parental bonding leave
- Paid sick leave, jury duty, bereavement
- 401k plan with company matching
- Flexible Time Off (our team members typically take off ~3-4 weeks per year)
- Volunteer Time Off
- 13 scheduled holidays
Salary Range: $120,000 - $140,000
PayNearMe strives to create a workplace where all employees thrive. Our core values represent who we are today and we take pride in the way we work with each other as well as with our stakeholders.
We’re in this together to do the right thing. We deliver real results we are proud of while remaining respectful, transparent, and flexible.
PayNearMe is an equal opportunity employer. We are diligently and thoughtfully working towards cultivating a diverse workforce which in turn, enhances our products and services for the communities we serve. Applicants who represent all backgrounds are strongly encouraged to apply.
—
CALIFORNIA CONSUMER PRIVACY ACT: APPLICANT NOTICE
Effective Date: January 1, 2020
Last Reviewed on: December 23, 2019
PayNearMe, Inc. (the “Company”) is providing you with this Notice (“Notice”) to inform you about:
- the categories of Personal Information that the Company collects and maintains about applicants; and
- the purposes for which the Company uses that Personal Information.
For purposes of this Notice, “Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly with, a natural person that the Company may collect in connection with screening applicants for job openings at the Company.
- Identifiers and Professional or Employment-Related Information. The Company collects identifiers and professional or employment-related information, which may include some or all the following: real name, nickname or alias, postal address, telephone number, e-mail address, membership in professional organizations, professional certifications, language skills, and current and past employment history. The Company collects this Personal Information to evaluate previous job performance and consider applicants for positions, to develop a talent pool and plan for succession, to conduct applicant surveys, to maintain an internal applicant directory and for purposes of identification, to promote the Company as a place to work, and for workforce reporting and data analytics/trend analysis.
- Personal Information Categories from Cal. Civ. Code § 1798.80(e). The Company may collect categories of Personal Information listed in Cal. Civ. Code §1798.80(e), other than those already listed above, (a) to the extent necessary to comply with the Company’s legal obligations, such as to accommodate disabilities; (b) to conduct a direct threat analysis in accordance with the Americans with Disabilities Act and state law; (c) for occupational health and safety compliance and record-keeping; and (d) to respond to an applicant’s medical emergency.
- Characteristics of Protected Classifications Under California or Federal Law. The Company may collect information about race, age, national origin, disability, sex, and veteran status as necessary to comply with legal obligations, including the reporting requirements of the federal Equal Employment Opportunity Act, the federal Office of Contracting Compliance Programs (applicable to government contractors), and California’s Fair Employment and Housing Act. The Company collects this Personal Information for purposes including: to comply with Federal and California law related to accommodation. The Company also collects this category of Personal Information on a purely voluntary basis, except where required by law, and uses the information only in compliance with applicable laws and regulations.
- Education Information. The Company collects education information such as resumes and graduation records. The Company collects this Personal Information to determine suitability for roles, to determine eligibility for training courses, and to assist with professional licensing.
- Profile Data. The Company may collect profile data, including the following: psychological assessments, behavior analyses, or other profiling of its applicants. The Company collects this Personal Information to determine aptitude for certain positions and job assignments as well.
- Background Screening Information. In the event that an applicant is given a formal job offer, the Company collects background screening information prior to hiring, including results of the following types of background screening: criminal history; sex offender registration; motor vehicle records; credit history; employment history; drug testing; and educational history. The Company collects this Personal Information to screen for risks to the Company and its clients, and continued suitability for their jobs and to evaluate applicants for promotions.
Assistance for Disabled Applicants
Alternative formats of this Notice are available to individuals with a disability. Please let us know if you need assistance.
All your information will be kept confidential according to EEO guidelines.
