{"id":456670,"url":"https://alion.io/job/firmus-technologies-security-engineer","title":"Senior AI Security Engineer","company":{"id":63306,"name":"Firmus Technologies","domain":"firmus.ai","url":"https://alion.io/company/firmus-technologies","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":81,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":200000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"CUDA","optional":false},{"name":"Function Calling","optional":false},{"name":"Go","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-04T03:34:13Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-26T04:15:28Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":51},"description":"Firmus Technologies\nFirmus Technologies is a global leader pioneering the development and operation of efficient AI infrastructure across Asia Pacific.\nFounded in Australia in 2019, our mission is to create the most efficient AI infrastructure by combining cutting-edge technology with a steadfast commitment to sustainability. \nAt Firmus, we are unique in our approach. We design, build, and operate a new class of digital infrastructure - the AI Factory. Through our model-to-grid technology approach, we have pushed the boundaries of multi-generational liquid cooling systems, energy management, AI software orchestration, and construction. For our customers, this approach allows us to make every watt count and deliver low-cost AI tokens globally.\nFirmus AI Cloud\nOur large-scale GPU cloud platform, Firmus AI Cloud, is purpose-built to deliver energy-efficient AI compute at scale to customers.\nIt empowers developers, enterprises, educational institutions, and government users to train and deploy AI models with unmatched efficiency and cost savings. With an ever-growing suite of services and applications, we are committed to delivering a cloud experience that is market-leading, proprietary, and built to scale.\nWhy Firmus?\nAs an NVIDIA Cloud and Engineering partner in Asia Pacific, you will gain skills, experience, and exposure across the AI industry and be part of shaping what this industry looks like for decades to come.\nWe are founder-led, not a big corporate. Decisions happen fast, our leaders are accessible, and there's minimum bureaucracy between you and the work. Ownership comes early. Whatever your role, you will have a direct line to outcomes, helping shape how the business grows as we scale nationally across a long-term, large-scale roadmap. \nWork alongside founders and experts in AI infrastructure, energy systems and next-generation compute.\nWhat we build here has impact beyond the business. Our AI Factories are designed to operate as assets to the energy grid to actively strengthen the communities and regions they operate in rather than drawing from them.\nConsidering applying? You don't need a perfect background to join our team. If you're driven and curious, there's a path for you. We back our people to grow into new domains and take on challenges beyond their previous experience.\nROLE SUMMARY\nThe Senior AI Security Engineer, AI Products & Applications will be embedded within the AI & Applications team to enable the secure design, development, release, and operation of AI products and applications. The role works directly with AI engineers, application engineers, product managers, inference engineers, DevOps, and platform teams to build practical security controls into agentic workflows, retrieval-augmented generation (RAG), model-serving APIs, enterprise-data integrations, and user-facing AI experiences.\nThis is a product- and application-oriented security role. The engineer will help teams deliver trusted AI features without unnecessarily slowing innovation, while ensuring that AI products protect customer, enterprise, and operational data. The role reports operationally to the Head of AI & Applications, with a dotted-line reporting relationship to the Head of Cybersecurity to maintain alignment with enterprise security strategy, risk management, compliance requirements, and incident-response processes.\nKEY RESPONSIBILITIES\nPartner with AI product, application, and engineering teams from discovery through production to define secure-by-design architectures for AI-powered products and services.\nThreat-model LLM-enabled and agentic workflows, including direct and indirect prompt injection, data exfiltration, unsafe tool use, excessive agent permissions, cross-tenant access, model abuse, and unintended autonomous actions.\nDesign secure patterns for agent identity, delegated authorization, scoped credentials, tool allowlists, approval gates, action validation, execution sandboxing, rollback, and auditability.\nSecure RAG and enterprise-knowledge workflows, including document ingestion, indexing, retrieval permissions, metadata filtering, source attribution, tenant isolation, sensitive-data classification, and data-retention controls.\nDefine security controls for user-facing AI products, including authentication, authorization, consent, rate limiting, abuse detection, content and output controls, conversation-data handling, and customer-facing audit trails.\nSecure model-serving and inference APIs through workload identity, API authentication, tenant-aware access controls, quotas, request validation, model access policies, usage monitoring, and logging controls.\nBuild reusable AI security guardrails, libraries, reference architectures, templates, policy-as-code, and developer tooling that make secure implementation the default path for product teams.\nWork with DevOps and Platform teams to ensure Kubernetes, custom job-scheduler integrations, CI/CD pipelines, secrets management, containers, and runtime environments provide the required security posture for AI applications.\nLead vulnerability management for AI application dependencies, model-serving runtimes, agent frameworks, SDKs, APIs, containers, CUDA and GPU software components, and related infrastructure.\nEmbed security requirements into application design reviews, pull-request and CI/CD controls, release processes, operational runbooks, and incident-response procedures.\nDevelop security telemetry and detections for anomalous agent actions, unsafe tool calls, unusual data retrieval, credential misuse, inference API abuse, suspicious workload behavior, and policy violations.\nAct as the principal security liaison between AI & Applications and the Cybersecurity function, coordinating architecture reviews, security exceptions, risk acceptance, compliance evidence, incident response, and remediation tracking.\nSKILLS AND EXPERIENCE\n5+ years of experience in security engineering, application security, cloud security, platform security, or a related field.\nDemonstrated experience embedding security practices into software engineering or product-development teams and supporting secure delivery from design through production.\nStrong understanding of application security, API security, secure software development lifecycle practices, threat modeling, vulnerability management, and security automation.\nPractical understanding of AI and LLM application security risks, including prompt injection, indirect prompt injection, jailbreaks, insecure tool use, excessive agency, model abuse, sensitive-data exposure, cross-tenant data leakage, and supply-chain risks.\nExperience securing agentic applications, RAG systems, enterprise search, vector databases, model-serving APIs, enterprise-data connectors, or comparable AI-enabled systems.\nExperience designing identity and access controls using OIDC, OAuth 2.0, SSO, RBAC, ABAC, workload identity, service accounts, secrets management, and least-privilege principles.\nStrong knowledge of Kubernetes and container security, including admission controls, network policies, RBAC, runtime protection, image scanning, software supply-chain security, and policy engines.\nExperience with secure CI/CD, dependency governance, SBOMs, image signing, provenance, artifact management, and controlled-release processes.\nProficiency in Python, Go, or a similar language for automation, security tooling, integrations, and analysis.\nFamiliarity with cloud and infrastructure security, including logging, monitoring, incident response, encryption, key management, and security controls for multi-tenant systems.\nKnowledge of security and compliance frameworks such as NIST, ISO 27001, SOC 2, CIS Controls, OWASP ASVS, OWASP API Security Top 10, or equivalent frameworks.\nKEY COMPETENCIES\nSecure-by-design AI product and application engineering.\nThreat modeling for LLM, RAG, agentic, and autonomous workflows.\nApplication, API, identity, and authorization security.\nSecure AI data flows, retrieval controls, and tenant isolation.\nAgent governance, tool authorization, human-in-the-loop controls, and action auditability.\nKubernetes, container, CI/CD, and software supply-chain security.\nRisk-based prioritization that balances product velocity, user experience, operational reliability, and security requirements.\nDeveloper enablement through reusable guardrails, secure patterns, automation, and clear documentation.\nStrong cross-functional communication with AI engineers, product teams, platform teams, DevOps, legal/compliance stakeholders, and Cybersecurity leadership.\nOwnership, sound judgment, and the ability to operate effectively in a fast-moving AI product environment.\nSUCCESS METRICS\nPercentage of AI products, agentic workflows, RAG systems, and inference services that complete security design review before production release.\nAdoption rate of reusable security patterns, guardrails, libraries, templates, and policy controls across AI & Applications projects.\nCoverage of authentication, authorization, tenant isolation, approval gates, audit logging, secrets management, and data-protection controls across AI applications.\nReduction in critical and high-risk security findings discovered late in development, during release, or after production deployment.\nMean time to identify, triage, and remediate vulnerabilities affecting AI applications, agent frameworks, model-serving components, APIs, and dependencies.\nReduction in unsafe or unauthorized agent actions, insecure tool calls, sensitive-data exposure events, abnormal retrieval attempts, and inference API abuse.\nSecurity readiness of AI product releases, including completion of threat models, architecture reviews, security testing, operational runbooks, and exception approvals.\nDemonstrable improvement in the time required for product teams to adopt approved security controls and obtain production-release clearance.\nQuality and completeness of security telemetry, audit evidence, incident investigations, and post-incident remediation.\nEffective execution of the dotted-line operating model, including consistent alignment with the Head of Cybersecurity on risk posture, standards, escalations, compliance, and incident response\nLOCATION \nSingapore or Australia \nDiversity\nAt Firmus, we are committed to building a diverse and inclusive workplace. We encourage applications from candidates of all backgrounds who are passionate about creating a more sustainable future through innovative engineering solutions.\nJoin us in our mission to revolutionise the AI industry through sustainable practices and cutting-edge engineering. Apply now to be part of shaping the future of sustainable AI infrastructure.","description_format":"text","description_chars":10680,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","Cloud Platforms (IaaS & PaaS)","Application Security","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-09-06T09:50:06Z"},{"event":"close","at":"2026-09-07T01:20:42Z"},{"event":"reopen","at":"2026-09-07T22:51:14Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.841,"p_room":0.9,"age_days":51,"expected_fill_days":81,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/firmus-technologies-security-engineer","json_url":"https://alion.io/job/firmus-technologies-security-engineer.json","meta":{"generated_at":"2026-10-26T04:57:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6597,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63306},"rest":"https://alion.io/mcp/rest/get_company?id=63306"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffirmus-technologies-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffirmus-technologies-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffirmus-technologies-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/firmus-technologies-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffirmus-technologies-security-engineer"}]}