{"id":3886205,"url":"https://alion.io/job/zip-co-principal-ai-security-engineer","title":"Principal AI Security Engineer","company":{"id":685645,"name":"Zip Co","domain":"zipcolimited.com","url":"https://alion.io/company/zipcolimited","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":94,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":203000,"max":254000,"currency":"USD","period":"year","gross":null,"usd_annual":254000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LangChain","optional":false},{"name":"LangGraph","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Red Teaming","optional":false},{"name":"Semantic Kernel","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vertex AI","optional":false}],"status":"live","first_seen_at":"2026-11-06T18:39:19Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T13:35:43Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Lead the technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows at Zip.\n\nArchitect and build scalable security controls for LLM applications, RAG systems, and agentic AI platforms.\n\nDevelop AI security testing, automation, and secure-by-default engineering practices to enable safe innovation at scale.\n\nRemote-first opportunity for US-based employees, with the option to work in person from our Manhattan office.\n\nStart your adventure with Zip \nJoin Zip's Security team and help shape how we securely build and operate AI-powered systems. AI is transforming how we develop software, operate our platforms, and deliver products. As our Principal AI Security Engineer, you'll lead the technical direction for securing AI applications, autonomous agents, and AI-enabled engineering workflows.\nThis is a hands-on engineering role for someone who has built and secured AI solutions in production. You'll work directly with engineering, platform, and security teams to design and implement scalable security controls that enable innovation without introducing unnecessary risk.\nWe're looking for a builder who can establish architectural direction, write code, and turn complex AI security challenges into practical engineering solutions.\nInteresting problems you'll get to solve\nArchitect and secure AI systems\nDefine and implement security architecture for LLM applications, RAG, autonomous agents, and AI-powered products.\nEngineer protections against prompt injection, data exfiltration, insecure tool execution, excessive agency, and other AI-specific threats.\nEstablish secure patterns for model access, NHI access, authorization, secrets management, and sensitive data protection.\nDesign security boundaries for AI agents interacting with enterprise systems, APIs, databases, and cloud infrastructure.\nBuild security into AI-first engineering\nEstablish secure-by-default patterns that allow developers to adopt AI without bypassing security controls.\nDevelop secure harnesses and guardrails for AI coding assistants, autonomous development agents, and AI-generated software.\nSecure MCP servers, agent tool integrations, and AI-enabled development workflows.\nBuild reusable security components, APIs, and automation that integrate directly into engineering platforms and CI/CD pipelines.\nEngineer AI security testing and automation\nBuild automated security testing and evaluation capabilities for AI applications and agents.\nDevelop approaches for AI red teaming, prompt injection testing, and security regression testing.\nImplement monitoring and detection for suspicious AI behavior, unauthorized tool execution, and sensitive data exposure.\nPost incidence response - agent misalignment (exceeds authority, unauthorized action).\nPartnering with the Agentic Platform team on controls to prevent recurrence.\nLeverage AI to automate security engineering activities, including threat modeling, vulnerability analysis, and remediation.\nLead AI security architecture\nEstablish Zip's technical direction and engineering standards for AI security.\nPartner with engineering teams to take secure AI solutions from architecture through production.\nDesign risk-tiering logic aligned with Zip's 5-level AI automation classification.\nCo-own the security evaluation framework for new AI models and third-party tools. Evaluate emerging AI technologies and security capabilities, making pragmatic build-versus-buy decisions.\nMentor engineers and influence technical decisions across security, platform engineering, and software development.\nWhat you'll bring to the team\nDemonstrated Staff or Principal-level technical leadership in security engineering, application security, or cloud security..\nDeep security engineering experience plus demonstrable hands-on work with LLM/agent systems (production, open source, internal platforms, or published research).\nIntimate familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.\nStrong understanding of LLM architectures, agentic systems, RAG, and modern AI development frameworks.\nExperience building AI security evaluations, red-teaming capabilities, model security gateways, as well as securing AI systems against prompt injection, data leakage, tool abuse, and unauthorized access.\nStrong software engineering skills, including proficiency in Python or another modern programming language.\nExperience with cloud-native architectures, APIs, containers, IAM, and modern software delivery practices.\nAbility to design and implement security controls, automation, and reusable engineering components.\nExperience threat modeling complex systems and translating security requirements into practical solutions.\nStrong technical leadership skills with the ability to influence architecture and engineering decisions across teams.\nA builder's mindset focused on automation, scalability, and secure-by-default engineering.\nHighly regarded\nExperience with LangChain, LangGraph, Semantic Kernel, OpenAI APIs, Azure AI, Google Vertex AI, or similar technologies.\nExperience securing MCP servers, autonomous coding agents, or agentic workflows.\nFamiliarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.\nExperience with Microsoft Azure, Google Cloud Platform (GCP), Terraform, Kubernetes, and CI/CD security.\nExperience in financial services, payments, or other regulated environments.\nWhat success looks like\nZip has a scalable security architecture for AI applications, autonomous agents, and AI-enabled engineering.\nEngineering teams can securely build and deploy AI solutions using reusable security controls and established architectural patterns.\nAI security testing, monitoring, and enforcement are integrated into development and production workflows.\nSecurity automation reduces manual effort while improving visibility and protection across AI systems.\nAI security enables engineering teams to innovate quickly without compromising security, privacy, or reliability.\nWhat you’ll get in return\nZip is a place where you’ll get out what you put in. The newness of our sector means we need to move at pace and embrace change, and our promise to you when you join the team is that you’ll feel empowered and trusted to make big things happen quickly. \nWe want you to feel welcome and as though you have the support to be yourself, and care for yourself at work. Because it’s important to us that you make the most of the opportunities you’ll get to grow your skills and your career, and be surrounded by smart, friendly people and leaders that have your back.\nWe think these are just some of the best things about being a Zipster. We will also offer you:\nFlexible working culture\nIncentive programs\nUnlimited PTO\nGenerous paid parental leave\nLeading family support policies\nCompany-sponsored 401k match\nLearning and wellness subscription stipend\nBeautiful Union Square office with a casual dress code\nIndustry-leading, employer-sponsored insurance for you and your dependents, with several 100% Zip-covered choices available\nZip is committed to a straightforward and transparent pay structure. The actual base salary will be determined by various individualized factors, including job-related knowledge, skills, experience, location, internal equity, as well as other objective business considerations.\nThe annual base Pay Range for this position is $203,000-$254,000 This range reflects our US national compensation band (USN). Additional premium percentages may apply based on our tiered premium strategy.\nSubject to those same considerations, the total compensation package for this position may also include other elements, including a bonus and/or commission awards, in addition to a full range of medical, financial, and/or other benefits. \n*Please note that visa sponsorship is not available for this position.\nIf hired, employees will be in an 'at-will position' and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation or benefit program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.\nBe a part of a team that reflects the diversity of our customers\nWe pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.\nEqually, we’re committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.\nAnd finally…get to know us\nZip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centered products. Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers access to point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants. We’re proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.\nI acknowledge by clicking \"Submit Application\", that the information provided is true and correct. I also understand that any willful dishonesty may render for refusal of this application or immediate termination of employment. By providing your information, you acknowledge that you have read our Zip Applicant and Candidate Privacy Notice and authorize Zip to process your data subject to those terms. Zip participates in the federal government’s E-Verify program. #LI-Remote\nBefore you apply, give Zip a try -> rebrand.ly/check-zip-out","description_format":"text","description_chars":9752,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Flexible schedule","Parental leave","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-11-06T19:42:33Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":56,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":254000,"is_top_pay":true},"html_url":"https://alion.io/job/zip-co-principal-ai-security-engineer","json_url":"https://alion.io/job/zip-co-principal-ai-security-engineer.json","meta":{"generated_at":"2026-11-08T14:45:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31181,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685645},"rest":"https://alion.io/mcp/rest/get_company?id=685645"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzip-co-principal-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzip-co-principal-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzip-co-principal-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zip-co-principal-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzip-co-principal-ai-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3886205}},{"tool":"search_jobs","arguments":{"company":"zipcolimited.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3886205},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}