{"id":3626091,"url":"https://alion.io/job/norm-ai-ai-security-engineer-defensive-automation","title":"AI Security Engineer, Defensive Automation","company":{"id":48153,"name":"Norm Ai","domain":"norm.ai","url":"https://alion.io/company/norm-ai","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":95,"open_postings":6,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":76,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States","New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":155000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CVE","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-02T15:32:49Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T00:35:55Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Norm Ai\nNorm Ai, the agentic law company, has a client base with a combined $30 trillion in assets under management.\nNorm Ai pioneered Legal Engineering, the process that empowers lawyers to build and supervise domain-specific AI agents with Norm’s proprietary suite of no-code software tools. Norm Ai technology is deployed inside many of the largest and most consequential institutions in the world.\nNorm Ai is also the technology behind Norm Law, LLP, a separate but affiliated AI-native law firm built for the era of agentic AI. Norm Law’s attorneys advise leading institutions across private funds, private equity, venture capital, real estate, registered funds, and financial regulation, using the same legal intelligence platform that powers Norm Ai’s products.\nAI Fluency:\nNorm Ai prefers all team members to be fluent in AI. Successful candidates actively use AI in their day-to-day work to support thinking, creation, and problem-solving. They use it to improve the quality and speed of their work and to continuously refine how work gets done end-to-end.\nCandidates should be prepared to demonstrate and discuss their AI usage throughout the interview process, including concrete examples of tools, workflows, and outcomes. We look for practical, hands-on experience, not theoretical familiarity.\nThis Role:\nWe’re hiring AI Security Engineers to build automated, AI-driven systems that find, prioritize, and fix security weaknesses faster than attackers can exploit them.\nYou’ll work across the full lifecycle, from discovery and threat modeling through remediation and response, and go deep in either offensive research or defensive operations based on your strengths. You’ll report to the Chief Security Officer and work closely with Engineering.\nWhat You’ll Do:\nAcross the Role\nBuild defensive automation: Design, build, and improve AI-driven security tooling, with the testing, safeguards, and human oversight you’d expect of production systems.\n\nThreat-model: Assess new and existing systems for risk, and use those models to decide where detection and remediation effort goes.\n\nRespond to incidents: Join the response rotation for critical vulnerabilities and security events, from assessing exposure through remediation.\n\nMeasure and communicate: Track how well our security work is performing, and explain risks and tradeoffs clearly to technical and non-technical audiences.\n\nResearch Focus\nFind unknown weaknesses: Proactively hunt for previously unknown weaknesses using both automated and manual techniques, in a safe and controlled way.\n\nValidate findings: Confirm and reproduce findings, and feed what you learn back into the automation to make it better.\n\nOperations Focus\nRun vulnerability management at scale: Triage, prioritize, and remediate vulnerabilities, automating as much of the process as you can.\n\nTurn threat information into priorities: Bring threat intelligence and external advisories into decisions about what gets fixed first.\n\nWhat We’re Looking For:\nCore Qualifications\nStrong software engineering skills, with production code in at least one modern language\n\nHands-on experience building with LLMs or AI agents\n\nSolid application security and cloud security fundamentals\n\nExperience running threat models\n\nCalm, structured judgment during incidents\n\nDeep Expertise in at Least One Area\nResearch: Vulnerability research, offensive security or red teaming, exploit development, CVE credits, or bug bounty work\n\nOperations: Vulnerability management at scale, detection and response, security automation, or software supply-chain security\n\nNice to Haves\nThreat intelligence experience\n\nExperience in highly regulated industries\n\nExperience securing multi-tenant SaaS\n\nCompensation and Benefits:\nBase Salary: $155,000 to $215,000 per year\nThe range displayed in this job posting reflects the minimum and maximum target for new hire salary for this position. Within the range, individual pay is determined by various factors, including job-related skills, experience, and relevant education or training.\nEquity: Included\nBenefits: 401(k) with employer match, health, dental, vision coverage, unlimited paid time off, free lunch in office daily, employee referral bonus program\nRelocation: Financial support to ease your move to New York City, designed to make the transition smooth and stress-free.\nLocation / Office Requirement: Washington, DC (preferred), New York City\nWork model: Hybrid\nTravel expectation: Travel to NYC headquarters at least once per quarter\nTo learn more about Norm Ai, visit our website.","description_format":"text","description_chars":4558,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["AI Agents","Financial AI","Legal AI"],"lifecycle":[{"event":"open","at":"2026-11-02T19:41:01Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":76,"reasons":["conf:1","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/norm-ai-ai-security-engineer-defensive-automation","json_url":"https://alion.io/job/norm-ai-ai-security-engineer-defensive-automation.json","meta":{"generated_at":"2026-11-04T01:30:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":307,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48153},"rest":"https://alion.io/mcp/rest/get_company?id=48153"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnorm-ai-ai-security-engineer-defensive-automation"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnorm-ai-ai-security-engineer-defensive-automation"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnorm-ai-ai-security-engineer-defensive-automation"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/norm-ai-ai-security-engineer-defensive-automation\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnorm-ai-ai-security-engineer-defensive-automation"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3626091}},{"tool":"search_jobs","arguments":{"company":"norm.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3626091},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}