Security Engineer

CuspAIAmsterdamHybridFull-time1 week ago

CuspAI is seeking a Security Engineer to build automated security pipelines and AI-specific guardrails protecting frontier models and research data. The role involves securing the ML lifecycle, cloud security, CI/CD, and DevSecOps, requiring 3+ years of experience in DevSecOps, Cloud Security, or SRE.

What you'll do

Secure the end-to-end ML lifecycle, implementing defenses against data poisoning and protecting proprietary model weights from theft.
Design and deploy prompt injection defenses and runtime firewalls to prevent unauthorized manipulation of LLM interfaces.
Implement AI Security Posture Management (AI-SPM) to monitor and catalog self-hosted models, internal training datasets, and proprietary endpoints.
Weave automated security guardrails directly into CI/CD workflows, including secret scanning, API exposure checks, and software composition analysis (SCA).
Codify security policies using Infrastructure as Code (IaC), ensuring all cloud resources are automatically compliant with global standards (e.g. GDPR, SOC2).
Manage secrets and vulnerability patching for containerized environments (e.g. Docker, Kubernetes) to ensure the research environment is resilient.
Design strict, least-privilege Identity and Access Management (IAM) controls to isolate sensitive training data and research workloads.
Lead incident response efforts by monitoring production logs for anomalies and collaborating with AI Researchers to deploy rapid fixes.
Empower the engineering team to own security by providing tools for local IDE security scanning and pre-commit hooks.
Act as a security educator, cultivating a culture of shared responsibility across the AI, chemistry, and engineering teams.
Partner with researchers, chemists, and engineers to translate security requirements into practical workflows that support rather than slow down scientific work.

What you need

Must-have

CI/CDGitHub ActionsGitLab CIJenkinsTerraformPulumiAWSGCP

Nice-to-have

AI-specific security toolsOWASP Top 10 for LLMsAI Security Posture Management (AI-SPM)AWS Certified SecurityCSEPOSCP

Soft skills

collaborationsecurity educationshared responsibilitycommunication

Security EngineerAIMaterials ScienceDevSecOpsCloud SecurityCI/CDKubernetesTerraformAmsterdamFull-time

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need