{"id":98068,"url":"https://alion.io/job/backblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer","title":"Sr. AI Security Engineer","company":{"id":37551,"name":"Backblaze","domain":"backblaze.com","url":"https://alion.io/company/backblaze","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":10,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Colombia","Mexico","Costa Rica"],"countries":["CO","MX","CR"],"hiring_countries":["MX","CO","CR"],"hiring_countries_total":3,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":120000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"Function Calling","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"LangChain","optional":true},{"name":"LlamaIndex","optional":true}],"status":"live","first_seen_at":"2026-06-08T23:22:33Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-24T04:45:35Z","board_verified":true,"closed_at":null,"days_open":137,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":137},"description":"Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.\nFounded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.\nBut while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We are seeking aSr. AI Security Engineer to join our team!\nAbout The Role\nBackblaze is seeking a Senior AI Security Engineer to design and implement safeguards for internal AI usage, with a focus on agentic systems, developer protection, and runtime security.\nThis is a hands-on role for a practitioner who has built and deployed security controls, not just defined policy. You will enable teams to safely use AI by creating enforcement layers, identity controls, and detection capabilities that constrain and monitor AI-driven activity.\nWhat You’ll Do:\nAgentic AI Safeguards\nArchitect and implement guardrails for tool-using AI systems, including:\nTool access controls and allowlists\nContext and memory isolation\nStep-level validation of agent actions\nApply mitigations aligned to the OWASP Agentic AI Top 10 (e.g., prompt injection, unsafe tool use, data leakage, excessive autonomy)\nRuntime Security Controls\nBuild enforcement mechanisms that govern AI behavior at execution time:\nInterceptors, proxies, or middleware for tool/API calls\nPolicy decision and enforcement layers\nRate limits, execution bounds, and kill-switches\nPrevent unsafe or unauthorized actions initiated by AI systems\nNon-Human Identity (NHI)\nDesign and implement identity and access controls for agents and automation, including:\nShort-lived credentials and scoped permissions\nClear separation between human and non-human access\nStrong binding of identity to task context and execution\nEnsure all AI actions are attributable and auditable\nObservability & Detection\nImplement logging and tracing for AI activity:\nPrompts, tool usage, and decision flows\nBuild detection capabilities using:\nBehavioral baselining and anomaly detection techniques\nIdentify and alert on:\nAbnormal tool usage\nSuspicious prompt patterns\nUnexpected data access\nThreat Modeling (MAESTRO)\nPerform agentic system threat modeling using MAESTRO, including:\nMapping agent capabilities, trust boundaries, and attack paths\nModeling misuse and adversarial scenarios\nTranslate findings into practical safeguards and detection logic\nDeveloper Safeguards\nProtect developers using AI tools by:\nPreventing sensitive data exposure\nValidating AI-generated code and actions\nConstraining unsafe automation\nEnable safe usage of AI-assisted development tools (e.g., Claude Code, Codex, Cursor) with:\nSecurity validation layers\nControlled prompting and output handling patterns\nThe Right Fit:\n7+ years in security engineering or backend systems\nProven experience designing and deploying security controls, such as:\nRuntime enforcement layers (proxies, middleware, policy engines)\nIdentity and access systems, especially for non-human entities\nStrong programming skills (Python preferred; Go, Java, or TypeScript a plus)\nExperience using AI-assisted development tools such as Claude Code in real workflows, including understanding associated security risks and safeguards\nExperience with:\nLogging, monitoring, and detection systems\nBuilding or securing API/service interactions\nPractical familiarity with:\nAgentic AI systems or tool-integrated LLM workflows\nOWASP guidance for AI/agent risks\nPractitioner Knowledge\nExperience applying (not just referencing):\nOWASP Agentic AI / LLM risk guidance\nNIST AI RMF concepts in real systems\n CSA guidance on workload and machine identity\nStrong understanding of:\nZero Trust for non-human identities\nSecrets management and credential scoping\nObservability tooling (e.g., OpenTelemetry, ELK)\nBonus Points For:\nExperience securing internal AI platforms or developer-facing AI tools\nBackground in detection engineering, threat hunting, or adversarial testing\nFamiliarity with agent frameworks (e.g., LangChain, LlamaIndex)\nExperience mentoring engineers and guiding secure design\nAt this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.\nAt Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.\nTo understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.","description_format":"text","description_chars":5892,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"},{"name":"Colombia","iso":"CO","kind":"country"},{"name":"Costa Rica","iso":"CR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Storage","Cloud Storage & File Sharing","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-06-08T23:22:33Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.716,"p_room":0.28,"age_days":137,"expected_fill_days":55,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/backblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer","json_url":"https://alion.io/job/backblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer.json","meta":{"generated_at":"2026-10-24T06:24:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9252,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":37551},"rest":"https://alion.io/mcp/rest/get_company?id=37551"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbackblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbackblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbackblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/backblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbackblaze-blog-cloud-storage-cloud-backup-sr-ai-security-engineer"}]}