{"id":782195,"url":"https://alion.io/job/immunitybio-senior-security-engineer-ai-model-and-application","title":"Senior Security Engineer, AI Model and Application","company":{"id":449855,"name":"ImmunityBio","domain":"immunitybio.com","url":"https://alion.io/company/immunitybio","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dunkirk, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"Hugging Face","optional":false},{"name":"ISO 27001","optional":false},{"name":"LangChain","optional":false},{"name":"LlamaIndex","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-05T00:00:00Z","employer_posted_date":"2026-08-05","last_verified_at":"2026-11-05T18:07:15Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":92},"description":"Company Overview\n ImmunityBio is a vertically integrated commercial stage biotechnology company developing next-generation therapies that bolster the natural immune system to defeat cancers and infectious diseases. The Company’s range of immunotherapy and cell therapy platforms, alone and together, act to drive and sustain an immune response with the goal of creating durable and safe protection against disease. Designated an FDA Breakthrough Therapy, ANKTIVA is the first FDA-approved immunotherapy for non-muscle invasive bladder cancer CIS that activates NK cells, T cells, and memory T cells for a long-duration response. The Company is applying its science and platforms to treating cancers, including the development of potential cancer vaccines, as well as developing immunotherapies and cell therapies that we believe sharply reduce or eliminate the need for standard high-dose chemotherapy. These platforms and their associated product candidates are designed to be more effective, accessible, and easily administered than current standards of care in oncology and infectious diseases. \nWhy ImmunityBio?\n\n ImmunityBio is developing cutting-edge technology with the goal to transform the lives of patients with cancer and develop next-generation therapies and vaccines that complement, harness and amplify the immune system to defeat cancers and infectious diseases.\n\n Opportunity to join a publicly traded biopharmaceutical company with headquarters in Southern California.\n\n Work with a collaborative team with the ability to work across different areas of the company.\n\n Ability to join a growing company with professional development opportunities.\nPosition Summary\nThe Senior Security Engineer AI Model and Application is a hands-on, systems-level role at the intersection of security engineering and artificial intelligence, involving close interaction with ML engineering, product, platform, and SOC/security operations teams. The Senior Security Engineer will serve as the subject matter expert (SME) in AI and LLM security across the organization, owning end-to-end security of AI systems - from data and training pipelines to inference endpoints and user-facing features. This role will support security leadership in driving threat modeling, adversarial testing, red teaming, and the implementation of secure-by-design AI features in alignment with applicable regulatory frameworks including NIST AI RMF, NIST CSF, and SOC 2 Type 2.\nEssential Functions\nDesign, implementation, and maintenance of security controls across the full AI/ML lifecycle, including training data validation, model registry policies, deployment guardrails, and production monitoring for anomalous model behavior.\nDevelop and maintain comprehensive threat models for AI/ML systems, covering prompt injection, data leakage, model evasion and extraction, data poisoning, and agent hijacking scenarios.\nLead red teaming and adversarial testing of LLMs and agentic workflows - including jailbreak attempts, prompt injection, output manipulation, and business logic abuse - and drive remediation with engineering teams.\nPartner with ML engineers to embed security into model development pipelines, including secure training, evaluation, and deployment processes, as well as secure use of RAG architecture, tooling integrations, and multi-agent workflows.\nImplement and define policies for safe prompt and response handling, including PII and sensitive content detection, output filtering, and usage logging to support investigations and compliance requirements.\nWork with security engineering to integrate AI telemetry into SIEM, EDR, and SOC workflows; define and maintain runbooks for AI-related security incidents and forensic investigations.\nLead the creation, modification, and maintenance of AI security documentation, including threat model reports, security specification documents, SOPs, data flow diagrams, and network topology documentation.\nStay current on AI-specific attack techniques, emerging tooling, and relevant frameworks (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS, secure AI development guidelines) and translate findings into internal standards and controls.\nConsult and collaborate with cross-functional SMEs across ML, Product, Platform Engineering, Legal, and Compliance to influence security design decisions and ensure operability and technical feasibility.\nProvide technical mentoring and oversight to less experienced security engineers responding to and investigating AI-related security issues.\nCreate, edit, and adhere to Standard Operating Procedures (SOPs), security playbooks, and standardized documentation templates.\nPerform ad-hoc and cross-functional projects assigned to support business needs and provide developmental opportunities.\nEducation & Experience\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field with 7+ years of relevant experience is required.\n5+ years of experience in application security, product security, or offensive security, including hands-on threat modeling and secure design for complex systems, is required.\nPractical, demonstrated experience assessing or attacking AI/ML or LLM systems (e.g., prompt injection, model abuse, data exfiltration via LLMs, or adversarial examples) is required.\nExperience working within or alongside regulated industries with compliance obligations (e.g., NIST AI RMF, SOC 2, ISO 27001) is preferred.\nExperience with RAG pipelines, vector databases, or agent frameworks and their associated security risks is preferred.\nKnowledge, Skills, & Abilities\nExcellent interpersonal skills and ability to work effectively in a cross-functional team environment spanning security, ML, and product disciplines.\nExcellent technical writing, communication, and organizational skills, with the ability to translate complex security risks into clear trade-offs and actionable requirements for non-security stakeholders.\nStrong proficiency in Python and familiarity with modern ML/LLM frameworks (e.g., LangChain, LlamaIndex, Hugging Face, OpenAI API).\nSolid understanding of common web and API security vulnerabilities (OWASP, authentication and authorization, rate limiting, abuse prevention) and how they manifest in AI-powered applications and agents.\nStrong knowledge of AI-specific threat frameworks including NIST AI RMF, OWASP LLM Top 10, and MITRE ATLAS.\nStrong data analytics skills with experience integrating AI telemetry into security monitoring and detection workflows.\nStrong leadership skills with the ability to drive security initiatives independently and mentor junior team members.\nWorking Environment / Physical Environment\nThis position works on-site in Dunkirk, NY\nRegular work schedule is Monday - Friday, within standard business hours. Flexibility is available with manager approval.\nMust possess mobility to work in a standard office setting and to use standard office equipment, including a computer.\nLift and carry materials weighing up to 30 pounds.\nThis position is eligible for a discretionary bonus and equity award. The annual base pay range for this position is below. The specific rate will depend on the successful candidate’s qualifications, prior experience as well as geographic location.\n$135,000 (entry-level qualifications) to $150,000 (highly experienced) annually\nThe application window is anticipated to close on 60 days from when it is posted or sooner if the position is filled or closed.\nImmunityBio uses artificial intelligence (AI) tools to assist with sourcing and identifying potential candidates for open positions. These tools help us reach qualified applicants and improve the efficiency of our recruitment outreach. No preference is given to applicants sourced or identified by AI tools.\nImportant: AI is not used to screen, evaluate, rank, assess, or make hiring decisions about applicants. All applications are reviewed by human recruiters and hiring managers. Hiring decisions are made solely by ImmunityBio personnel without automated decision-making.\nWe are committed to equal employment opportunity and ensure that all candidates are assessed based on their qualifications, skills, and experience through human review.\nImmunityBio employees are as valuable as the people we serve. We have built a resource of robust benefit offerings to best support the total wellbeing of our team members and their families. Our competitive total rewards benefits package, for eligible employees, include: Medical, Dental and Vision Plan Options\nHealth and Financial Wellness Programs\nEmployer Assistance Program (EAP)\nCompany Paid and Voluntary Life/AD&D, Short-Term and Long-Term Disability\nHealthcare and Dependent Care Flexible Spending Accounts\n401(k) Retirement Plan with Company Match\n529 Education Savings Program\nVoluntary Legal Services, Identity Theft Protection, Pet Insurance and Employee Discounts, Rewards and Perks\nPaid Time Off (PTO) includes: 11 Holidays\nExempt Employees are eligible for Unlimited PTO\nNon-Exempt Employees are eligible for 10 Vacation Days, 56 Hours of Health Pay, 2 Personal Days and 1 Cultural Day\nWe are committed to providing you with the tools and resources you need to optimize your Health and Wellness.\nAt ImmunityBio, we are an equal opportunity employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.","description_format":"text","description_chars":9603,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Professional development","Retirement plans","Unlimited PTO","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cell & Gene Therapy","Biologics & Biosimilars","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-09-12T00:59:56Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 9","filings_12m":9,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":142500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.592,"p_room":0.28,"age_days":92,"expected_fill_days":35,"reasons":["conf:14","win:tail","crowd:"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/immunitybio-senior-security-engineer-ai-model-and-application","json_url":"https://alion.io/job/immunitybio-senior-security-engineer-ai-model-and-application.json","meta":{"generated_at":"2026-11-05T23:16:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4486,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449855},"rest":"https://alion.io/mcp/rest/get_company?id=449855"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fimmunitybio-senior-security-engineer-ai-model-and-application"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fimmunitybio-senior-security-engineer-ai-model-and-application"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fimmunitybio-senior-security-engineer-ai-model-and-application"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/immunitybio-senior-security-engineer-ai-model-and-application\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fimmunitybio-senior-security-engineer-ai-model-and-application"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":782195}},{"tool":"search_jobs","arguments":{"company":"immunitybio.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":782195},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}