{"id":1454962,"url":"https://alion.io/job/simpson-thacher-bartlett-llp-senior-security-engineer-ai-security","title":"Senior Security Engineer, AI Security","company":{"id":1842699,"name":"Simpson Thacher & Bartlett","domain":"stblaw.com","url":"https://alion.io/company/stblaw","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":16,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-28T00:00:00Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-21T15:35:45Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"The Senior Security Engineer, AI Security is a hands-on technical expert responsible for designing, implementing, and continuously enhancing the firm's AI Security Program. This role will serve as a key security partner to Application Security, Product Development, Technology Architecture, Infrastructure, and AI Enablement teams to ensure AI technologies are deployed securely, responsibly, and in alignment with technologies are deployed securely, responsibly, and in alignment with business, regulatory, and risk management requirements.\nThis role is responsible for implementing security controls across the AI ecosystem, including large language models (LLMs), AI coding assistants, Agents, AI gateways, and platforms such as Claude. The successful candidate will establish security guardrails, monitor AI risks, implement technical controls, and support governance processes that enable secure AI adoption.\nThe ideal candidate brings deep expertise in AI, application, and cloud security, with the ability to navigate complexity, solve complex problems, work effectively amid ambiguity, and deliver measurable security outcomes.\nESSENTIAL JOB DUTIES & RESPONSIBILITIES\nLead the implementation, maturation, and continuous improvement of the enterprise AI Security Program.\n\nDevelop and operationalize AI security standards, control frameworks, secure design patterns, implementation baselines, and governance processes that support the secure evaluation, onboarding, deployment, and monitoring of AI technologies.\n\nServe as the lead security engineer for enterprise AI platforms, including Claude, AI coding assistants, AI gateways, Agents, MCP-based integrations, and other emerging AI technologies.\n\nDesign, implement, and continuously improve security controls including identity and access management, authorization models, tenant security configurations, encryption, logging, monitoring, and data protection safeguards.\n\nDevelop and operationalize AI guardrails to mitigate risks including prompt injection, jailbreaks, unauthorized access, excessive agency, sensitive data exposure, model misuse, and adversarial attacks.\n\nDevelop security automation, governance automation, and policy-as-code capabilities that enable scalable AI security operations.\n\nContribute to security architecture reviews and threat modeling activities for AI-enabled applications, platforms, agents, workflows, and integrations.\n\nEstablish secure development standards for AI-enabled software development practices.\n\nSupport security operations teams in monitoring and responding to AI security threats and emerging adversarial techniques.\n\nPartner with Data Protection, Privacy, Compliance, and Governance teams to implement safeguards for the secure use of data within AI platforms.\n\nFunction as the firm's subject matter expert on AI security, emerging threats, adversarial AI risks, and industry best practices.\n\nProvide technical security engineering leadership for AI security innovation, proof-of-concepts, and future-state capabilities that improve security and business enablement.\n\nDefine, and report key performance indicators (KPIs) to measure security effectiveness and maturity.\n\nStay current on emerging threats, technologies, and industry trends to proactively reduce organizational risk.\n\nBuild strong cross-functional partnerships across global teams and external stakeholders.\n\nEDUCATION\nBachelor’s degree in information security, IT, related discipline, or equivalent experience\n\nProfessional certifications such as CISSP, CCSP, CISM, or similar preferred\n\nSKILLS AND EXPERIENCE\n10+ years of experience in security engineering, application security, cloud security, or a related cybersecurity discipline, with 3+ years of hands-on experience securing AI platforms, AI-enabled applications, or enterprise AI solutions.\n\nDeep knowledge of AI security principles and frameworks, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), MITRE ATLAS, secure AI development practices, and AI governance principles.\n\nStrong understanding of AI threats including prompt injection, jailbreaks, data poisoning, model manipulation, excessive agency, MCP vulnerabilities and sensitive data exposure.\n\nExperience securing enterprise AI platforms such as Claude, Microsoft Copilot, AI coding assistants, AI agents, or similar technologies.\n\nExperience implementing identity, authentication, authorization, RBAC, API security, and privileged access controls for AI platforms.\n\nExperience building security automation, policy-as-code, and governance automation to support AI security operations at scale.\n\nKnowledge of Secure SDLC, OWASP Top 10, API Security, software supply chain security, container security, and DevSecOps best practices.\n\nDemonstrated ability to build developer-friendly security controls that balance risk management with engineering productivity.\n\nAbility to manage multiple concurrent objectives and activities and make effective judgments in prioritizing and time allocation.\n\nMust be able to build collaborative relationships and is comfortable interacting frequently with leadership and internal/external stakeholders.\n\nSalary Information\nNY Only: The estimated base salary range for this position is $180,000 to $215,000 at the time of posting.\nThe actual salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location in which the applicant lives and/or from which they will be performing the job. This role is exempt meaning it is not overtime pay eligible.\nSimpson Thacher will not sponsor applicants for work visas for this position.\nPrivacy Notice\nFor information about how Simpson Thacher & Bartlett LLP collects and processes your personal information, please refer to our Privacy Notice available at https://www.stblaw.com/other/privacy-notice.\nSimpson Thacher & Bartlett is committed to a collegial work environment in which all individuals are treated with respect and dignity. The Firm prohibits discrimination or harassment based upon race, color, religion, gender, gender identity or expression, age, national origin, citizenship status, disability, marital or partnership status, sexual orientation, veteran’s status or any other legally protected status. This Policy pertains to every aspect of an individual’s relationship with the Firm, including but not limited to recruitment, hiring, compensation, benefits, training and development, promotion, transfer, discipline, termination, and all other privileges, terms and conditions of employment.\n#LI-Hybrid","description_format":"text","description_chars":6751,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Legal Services"],"lifecycle":[{"event":"open","at":"2026-09-29T09:22:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 82 · green card filings: 5","filings_12m":82,"filings_prev_12m":71,"green_card_filings_12m":5,"median_offered_wage_usd":268822,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.568,"p_room":0.75,"age_days":23,"expected_fill_days":25,"reasons":["conf:2","stale_co","velocity","win:late"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/simpson-thacher-bartlett-llp-senior-security-engineer-ai-security","json_url":"https://alion.io/job/simpson-thacher-bartlett-llp-senior-security-engineer-ai-security.json","meta":{"generated_at":"2026-10-21T22:31:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32158,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1842699},"rest":"https://alion.io/mcp/rest/get_company?id=1842699"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsimpson-thacher-bartlett-llp-senior-security-engineer-ai-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsimpson-thacher-bartlett-llp-senior-security-engineer-ai-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsimpson-thacher-bartlett-llp-senior-security-engineer-ai-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/simpson-thacher-bartlett-llp-senior-security-engineer-ai-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsimpson-thacher-bartlett-llp-senior-security-engineer-ai-security"}]}