Friedman Williams
Senior Security Engineer, AI Solutions New York New York
Job ID: 21731
Seeking a Senior Security Engineer, AI Solutions to serve as the security engineering lead for its AI and Innovation team and provide technical guidance on securing the Firms expanding ecosystem of AI-powered tools, platforms, and applications.
This role sits at the intersection of AI innovation and enterprise security, helping the Firm adopt and develop AI technologies safely, responsibly, and at scale. As the use of generative AI and agentic AI systems accelerates, the successful candidate will play a critical role in identifying security risks, establishing safeguards, and enabling AI solutions that protect sensitive firm and client information.
Reporting to the Chief Information Officer, the Senior Security Engineer will work closely with the Chief Information Security Officer, Chief AI Strategy & Innovation Officer, and IT leadership to integrate security throughout the AI development and deployment lifecycle.
Key Responsibilities
- AI Security Strategy: Partner with AI, Innovation, IT, and Information Security teams to evaluate AI use cases, assess risks, and develop secure technical approaches that support business objectives.
- Vendor Security Assessments: Conduct technical security reviews of AI vendors and products, evaluating architecture, data flows, security controls, and assurance documentation, including SOC 2 reports, ISO certifications, and penetration test results.
- Secure AI Architecture: Design and review secure architectures for AI applications, agents, integrations, APIs, and workflows, ensuring appropriate authentication, authorization, permissions, and monitoring.
- Application Security & Code Review: Review application architecture, source code, dependencies, and development practices to identify vulnerabilities, insecure coding patterns, access-control weaknesses, and data exposure risks before production deployment.
- AI Threat Modeling: Identify and mitigate AI-specific threats, including prompt injection, unauthorized data access, sensitive information disclosure, insecure tool usage, and vulnerable integrations.
- Security Controls & Governance: Translate firm and client requirements into practical security controls, policies, guardrails, monitoring, and detection capabilities in partnership with IT Compliance and Information Security.
- Monitoring & Incident Response: Collaborate with security leadership to establish appropriate monitoring, threat detection, and incident response processes for AI systems.
- Technical Advisory: Communicate security risks, mitigation strategies, and technical tradeoffs to IT leadership, AI developers, and business stakeholders.
Qualifications
- 7+ years of experience in security engineering, security architecture, application security, cloud security, or a related discipline, including meaningful recent experience with AI/ML or generative AI security.
- Strong understanding of modern AI technologies, including large language models (LLMs), retrieval-augmented generation (RAG), agentic AI, and associated security risks.
- Experience conducting technical security assessments of third-party vendors, SaaS platforms, cloud services, and enterprise applications.
- Expertise in secure architecture, application and API security, identity and access management, data protection, vulnerability management, and secure software development lifecycle (SDLC) practices.
- Experience with threat modeling, source code reviews, secure coding principles, and the OWASP Top 10, including the OWASP Top 10 for LLM Applications.
- Familiarity with AWS or other major cloud platforms, enterprise integrations, networking, firewalls, proxies, and modern SASE solutions.
- Ability to translate business, contractual, regulatory, and client security requirements into practical technical controls and safeguards.
- Strong communication and problem-solving skills, with the ability to explain complex security issues to technical and non-technical audiences.
- Ability to exercise sound judgment in a rapidly evolving environment and balance security requirements with innovation.
- Experience in a law firm or professional services environment preferred.
- Bachelors or masters degree in Computer Science, Cybersecurity, Information Security, or a related field preferred; equivalent experience will be considered.
- Certifications such as CISSP, CCSP, or CISM are a plus.
- Flexibility to adjust working hours to meet business needs.
Please send resume to tgrossman@friedmanwilliams.com