{"id":2650138,"url":"https://alion.io/job/healthfirst-sr-ai-security-engineer","title":"Sr AI Security Engineer","company":{"id":1794553,"name":"Healthfirst","domain":"healthfirst.org","url":"https://alion.io/company/healthfirst","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":17,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":134600,"max":194480,"currency":"USD","period":"year","gross":null,"usd_annual":194480},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Embeddings","optional":false},{"name":"Function Calling","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"RAG","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Tool Use","optional":false},{"name":"AWS","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"Azure","optional":true},{"name":"Bicep","optional":true},{"name":"CI/CD","optional":true},{"name":"CloudFormation","optional":true},{"name":"Least Privilege","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"OpenAI","optional":true},{"name":"OWASP","optional":true},{"name":"Python","optional":true},{"name":"Red Teaming","optional":true},{"name":"SBOM","optional":true},{"name":"Terraform","optional":true},{"name":"Vertex AI","optional":true}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-16T01:25:15Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"The Sr AI Security Engineer continuously monitors the vulnerability of the enterprise and develops engineering solutions to improve the security of the Healthfirst infrastructure. The Sr AI Security Engineer applies expertise across the Cyber Security discipline by demonstrating competency in IT Infrastructure and Application Development. The ideal candidate has a strong background in application, product, or cloud security combined with hands-on knowledge of modern AI technologies such as LLMs, Retrieval-Augmented Generation (RAG), and AI agents.Duties and Responsibilities:\nPerform security architecture reviews and threat modeling for AI-enabled applications.\nConduct hands-on security testing of LLM, RAG, and agentic AI solutions.\nIdentify vulnerabilities including prompt injection, sensitive-data exposure, insecure retrieval, excessive permissions, unsafe tool use, and authorization weaknesses.\nAssess security risks associated with AI agents, APIs, model integrations, vector databases, and third-party AI services.\nPartner with developers and AI engineering teams to design and implement practical security controls.\nDevelop reusable security patterns and guardrails for common AI architectures.\nBuild or automate security tests and tools used to evaluate AI applications.\nHelp protect PHI, PII, credentials, and other sensitive information used by AI systems.\nEvaluate emerging AI security threats and translate relevant findings into engineering guidance.\nSupport the organization's broader application security and secure AI development practices.\nHelp ensure AI systems handling sensitive healthcare and enterprise information are designed with appropriate security and privacy controls.\nAssess how PHI, PII, and other sensitive information moves through prompts, models, APIs, retrieval systems, embeddings, vector stores, logs, agents, and downstream systems.\nPartner with privacy, compliance, legal, risk, and AI governance teams to translate requirements into practical technical controls.\nSupport secure and responsible AI adoption consistent with organizational policies and applicable healthcare and regulatory requirements.\nAdditional duties as required.\nMinimum Qualifications:\nTechnical Degree in Computer Science or Cyber Security and/or equivalent work experience\nPrior work Cyber Security work experience\nExperience in security engineering, vulnerability assessment, threat hunting, and incident response\nHigh School diploma or GED from an accredited institution\nPreferred Qualifications:\n5+ years of experience in application security, product security, security engineering, cloud security, offensive security, or a related technical security discipline.\nStrong understanding of application and API security, authentication, authorization, identity, data protection, and secure software development.\nHands-on experience with security architecture reviews, threat modeling, vulnerability assessment, penetration testing, or security testing.\nWorking knowledge of modern AI application architectures, including LLMs, model APIs, RAG, vector databases, and AI agents.\nUnderstanding of AI security risks such as prompt injection, data leakage, insecure output handling, excessive agency, and unsafe tool or API access.\nProgramming or scripting experience, preferably Python.\nExperience working with cloud-based applications and services.\nAbility to communicate technical security risks and remediation recommendations effectively to engineering teams.\nExperience securing production generative AI or LLM applications.\nExperience with AI/LLM security testing or red teaming.\nFamiliarity with agentic AI security, including tool permissions and least-privilege access.\nFamiliarity with Model Context Protocol (MCP) security considerations.\nExperience with Azure OpenAI, AWS Bedrock, Google Vertex AI, or comparable AI platforms.\nFamiliarity with OWASP guidance for LLM/GenAI applications, MITRE ATLAS, or NIST AI security guidance.\nExperience working with PHI, PII, or other sensitive data in a regulated environment.\nExperience integrating security testing into CI/CD or DevSecOps workflows.\nExperience with software supply-chain security and SBOM practices, including assessing third-party libraries, dependencies, models, prompts, and other AI application components for security risk.\nExperience designing secure tool and API consumption patterns for agentic AI, including authentication, authorization, least privilege, trust boundaries, credential management, and control of agent actions.\nExperience reviewing or implementing Infrastructure as Code (IaC) and applying security controls to cloud and AI infrastructure; experience with Terraform, Bicep, CloudFormation, or comparable frameworks preferred.\nCompliance and Regulatory Responsibilities: See Above\nLicense/Certification: See Above\nWE ARE AN EQUAL OPPORTUNITY EMPLOYER. HF Management Services, LLC complies with all applicable laws and regulations. Applicants and employees are considered for positions and are evaluated without regard to race, color, creed, religion, sex, national origin, sexual orientation, pregnancy, age, disability, genetic information, domestic violence victim status, gender and/or gender identity or expression, military status, veteran status, citizenship or immigration status, height and weight, familial status, marital status, or unemployment status, as well as any other legally protected basis. HF Management Services, LLCshallnotdiscriminateagainstanydisabledemployeeorapplicantinregard to any position for which the employee or applicant is otherwise qualified.\nIf you have a disability under the Americans with Disability Act or a similar law and want a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to  or calling 212-519-1798 . In your email please include a description of the accommodation you are requesting and a description of the position for which you are applying. Only reasonable accommodation requests related to applying for a position within HF Management Services, LLC will be reviewed at the e-mail address and phone number supplied. Thank you for considering a career with HF Management Services, LLC.\nKnow Your Rights\nAll hiring and recruitment at Healthfirst is transacted with a valid “@healthfirst.org” email address only or from a recruitment firm representing our Company. Any recruitment firm representing Healthfirst will readily provide you with the name and contact information of the recruiting professional representing the opportunity you are inquiring about. If you receive a communication from a sender whose domain is not @healthfirst.org, or not one of our recruitment partners, please be aware that those communications are not coming from or authorized by Healthfirst. Healthfirst will never ask you for money during the recruitment or onboarding process.\nHiring Range*:\nGreater New York City Area (NY, NJ, CT residents): $134,600 - $194,480\n\nAll Other Locations (within approved locations): $119,600 - $177,905\n\nAs a candidate for this position, your salary and related elements of compensation will be contingent upon your work experience, education, licenses and certifications, and any other factors Healthfirst deems pertinent to the hiring decision.\nIn addition to your salary, Healthfirst offers employees a full range of benefits such as, medical, dental and vision coverage, incentive and recognition programs, life insurance, and 401k contributions (all benefits are subject to eligibility requirements). Healthfirst believes in providing a competitive compensation and benefits package wherever its employees work and live.\n*The hiring range is defined as the lowest and highest salaries that Healthfirst in “good faith” would pay to a new hire, or for a job promotion, or transfer into this role.","description_format":"text","description_chars":7878,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"New Jersey","iso":null,"kind":"city"},{"name":"Connecticut","iso":null,"kind":"city"},{"name":"New York","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Application Security","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-15T21:22:10Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.414,"p_room":0.45,"age_days":52,"expected_fill_days":28,"reasons":["conf:4","stale_co","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":194480,"is_top_pay":true},"html_url":"https://alion.io/job/healthfirst-sr-ai-security-engineer","json_url":"https://alion.io/job/healthfirst-sr-ai-security-engineer.json","meta":{"generated_at":"2026-10-16T19:58:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":436,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1794553},"rest":"https://alion.io/mcp/rest/get_company?id=1794553"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhealthfirst-sr-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhealthfirst-sr-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhealthfirst-sr-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/healthfirst-sr-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhealthfirst-sr-ai-security-engineer"}]}