{"id":4720,"url":"https://alion.io/job/rithum-staff-information-security-engineer-ai-first","title":"Staff Information Security Engineer - AI First","company":{"id":1925,"name":"Rithum","domain":"rithum.com","url":"https://alion.io/company/rithum","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":149000,"max_usd":265000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":96},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anthropic","optional":false},{"name":"AWS","optional":false},{"name":"ChatGPT","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"LangChain","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"DLP","optional":true},{"name":"GDPR","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-06-18T21:04:38Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-18T15:12:22Z","board_verified":true,"closed_at":null,"days_open":121,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":121},"description":"Rithum™ is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers, enabling them to accelerate growth, optimize operations across channels, scale product offerings and enhance margins.\nToday, more than 40,000 companies trust Rithum to grow their business across hundreds of channels, representing over $50 billion in annual GMV. Using our commerce, marketing, and delivery solutions, our customers create optimized consumer shopping journeys from beginning to end.\nOverview\nRithum expects employees across all roles to leverage AI and technology to improve efficiency, streamline workflows, and create scalable ways of working. \nRithum is embedding AI into every corner of how it operates - and security is no exception.\nAs a Staff AI-First Information Security Engineer, you own the intersection of AI adoption and information security: designing guardrails for AI-powered products, building automated security tooling, designing security controls and monitoring for an AI-First workforce, helping every team at Rithum move fast without creating risk they cannot see. This is not a typical security role. You spend as much time building and automating as you do reviewing, turning a repeating control into infrastructure-as-code, a manual review into a workflow, and a vague AI risk into a concrete, enforced guardrails. You work autonomously, balancing research with fast-paced delivery, and collaborating closely with Platform Engineering, IT, Security Champions, and external auditors.\n\nResponsibilities\nAct as the bridge between architectural intent and operational reality; mediate conflicts between security requirements and feasible implementation, propose compensating controls where gaps exist and help register, track and remediate residual risks.\nImplement preventive, default-on security controls across cloud and enterprise environments, codified as policy- and infrastructure-as-code so security is enforced by design, including controls that govern how AI tools and models may be used.\nImplement and enforce identity and access controls to an agreed standard, including access boundaries for AI systems and non-human/agent identities by partnering with Platform Engineering and IT to align tooling and policy to the architecture.\nAssist in maintaining the InfoSec risk register; track emerging threats and translate them into actionable guidance for engineering teams.\nSupport third-party and vendor risk assessments, with a focus on vendors who process data through AI pipelines.\nAutomate repetitive security workflows (evidence collection, access reviews, alert enrichment) and build or operate AI-assisted security agents - with human-in-the-loop approval gates, least-privilege credentials, and explicit attention to each agent's own blast radius.\nIntegrate security tooling (SIEM, CSPM, DAST/SAST, vulnerability scanners) with LLM layers to surface actionable insight and automated responses.\nDefine and enforce security requirements for AI-powered features: model access controls, prompt-injection mitigations, output validation, and data-handling boundaries.\nConduct threat modelling on agentic and LLM-based systems, accounting for novel attack surfaces such as tool misuse, indirect prompt injection, and supply chain risk.\nQualifications \nMinimum Qualifications \n5+ years of security engineering experience with demonstrated AI/ML security depth (prompt injection, model supply chain, adversarial inputs, RAG).\nExperience using AI tools (ChatGPT, Copilot, Claude, etc.) and LLM frameworks and APIs (OpenAI, Anthropic, LangChain, or similar) to accelerate and elevate your work.\nHands-on identity and access expertise across modern enterprise and cloud identity stacks, including access models for AI systems and non-human identities.\nInfrastructure and policy-as-code (e.g. Terraform, OPA/Rego) and proficiency in a scripting language for automation (Python preferred).\nCloud security expertise: AWS Solutions Architect / Security Specialty or equivalent demonstrated expertise, including multi-account governance, preventive guardrails, and policy-as-code.\nApplication security (OWASP Top 10 and the OWASP LLM/GenAI Top 10, secure SDLC) and threat-modelling methodologies (STRIDE, PASTA, or equivalent). Practical experience building or operating AI agents, and integrating security tooling (SIEM, CSPM, SAST/DAST/SCA) so it surfaces action rather than raw alerts.\nWorking knowledge of SOC 2 and/or ISO 27001 control frameworks.\nPreferred Qualifications \nExperience building or operating AI agents in a production environment.\nAwareness of privacy regulation (GDPR/CCPA) as it touches AI including privacy-by-design and DPIAs.\nRed teaming or adversarial ML research backgrounds.\nExperience implementing privileged-access, key-management, posture-management, or data-protection programs.\nExperience with EDR, CASB, DLP, Security automation and SAST, DAST, IAST and SCA tools.\nCloud Architecture or Security certifications (CCSK, TAISE, AWS).\nTravel Required\nUp to 10%\nOther Duties\nPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.\n\nWhat it’s like to work at Rithum \nWhen you join Rithum, you can expect to work with smart risk-takers, courageous collaborators, and curious minds.\nAs part of the Rithum team, you are valued, supported, and included. Guided by a transparent culture and accessible, approachable leadership, we offer career opportunities aligned to your ambitions and talents. To ensure work and life balance works for you, we also offer an array of resources to support you and your families, including comprehensive benefits and wellness plans.\nAt Rithum you will:\nPartner with the leading brands and retailers.\nConnect with passionate professionals who will help support your goals.\nParticipate in an inclusive, welcoming work atmosphere.\nAchieve work-life balance through remote-first working conditions, generous time off, and wellness days.\nReceive industry-competitive compensation and total rewards benefits.\nWe believe in transparency and fairness in our compensation practices.\nFor this position, the expected base pay range is: $170,000-$220,000 per year. \nThis range represents the base pay for the role across all U.S. locations and is determined based on market data, internal equity, and experience. Final compensation may vary depending on geographic location, skills, and relevant experience.In addition to base pay, we offer a discretionary bonus for non-sales roles, a comprehensive benefits package, and, where applicable, sales incentives.\nFor this position, the expected discretionary bonus is 12% of the annual base salary.\n Benefits \nMedical, dental and vision benefits: Affordable health care plans and company HSA contributions, starting on Day 1\nA 6% 401(k) match\nCompetitive time off package with 20 days of Paid Time Off, 9 Company-Paid holidays, 2 paid floating holidays, 7 paid sick days, 2 Wellness days, and 1 Paid Volunteer Day; at 3 years of service PTO increases to 22 days, and at 5 years it increases to 25 days\n12 weeks primary caregiver leave & 4 weeks secondary caregiver leave\nAccident, critical illness, and hospital indemnity insurance\nPet insurance\nLegal assistance and identity theft insurance plans\nLife insurance 2x salary\nAccess to the Calm app and the Employee Assistance Program\n$65/month Remote work stipend for internet\nCulture and team-building activities\nTuition assistance\nCareer development opportunities\nCharitable contribution match up to $250 per year\nRithum is an equal opportunity employer. We are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other protected characteristic. All employment is decided on the basis of qualifications, merit, and business need.\nWe're committed to providing reasonable accommodations in accordance with the law for qualified applicants. If you require assistance during the interview process due to a medical condition or need support accessing our website or completing the application process, please reach out to us by completing the Accommodations Request Form. Your comfort and accessibility are important to us, and we're here to ensure a seamless experience as you explore opportunities with our team.","description_format":"text","description_chars":8776,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Commerce","E-commerce Marketing","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-06-18T21:04:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.815,"p_room":0.28,"age_days":120,"expected_fill_days":56,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/rithum-staff-information-security-engineer-ai-first","json_url":"https://alion.io/job/rithum-staff-information-security-engineer-ai-first.json","meta":{"generated_at":"2026-10-18T15:39:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21528,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1925},"rest":"https://alion.io/mcp/rest/get_company?id=1925"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frithum-staff-information-security-engineer-ai-first"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frithum-staff-information-security-engineer-ai-first"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frithum-staff-information-security-engineer-ai-first"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rithum-staff-information-security-engineer-ai-first\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frithum-staff-information-security-engineer-ai-first"}]}