AI Security Engineer

Your Journey at Crowe Starts Here

At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you're trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That's why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.

About Crowe AI Transformation

Everything we do is about making the future of human work more purposeful. We do this by leveraging state-of-the-art technologies, modern architecture, and industry experts to create AI-powered solutions that transform the way our clients do business.

The new AI Transformation team will build on Crowe's established AI foundation, furthering the capabilities of our Applied AI / Machine Learning team. By combining Generative AI, Machine Learning and Software Engineering, this team empowers Crowe clients to transform their business models through AI, irrespective of their current AI adoption stage.

As a member of AI Transformation, you will help distinguish Crowe in the market and drive the firm's technology and innovation strategy. The future is powered by AI, come build it with us.

About the Team

• We invest in expertise. You'll have the time, space, and support to go deep in your projects and build lasting technical and strategic mastery. You'll work with developers, product stakeholders, and project managers as a trusted leader and domain expert.
• We believe in continuous growth. Our team is committed to professional development and knowledge-sharing.
• We protect balance. Our distributed team culture is grounded in trust and flexibility. We offer unlimited PTO, a flexible remote work policy, and a supportive environment that prioritizes sustainable, long-term performance.

About the Role

The AI Security Engineer I (Senior Staff) serves as a senior technical expert responsible for securing enterprise AI and machine learning systems across their full lifecycle, including data ingestion, model training, inference pipelines, retrieval-augmented generation (RAG) systems, and generative AI applications. This role leads advanced security assessments, identifies vulnerabilities unique to AI-enabled platforms, and architects secure-by-design solutions for cloud and hybrid environments.

Working closely with cybersecurity, cloud engineering, MLOps, data engineering, and AI engineering teams, the engineer designs and implements security controls that protect sensitive data, model artifacts, embeddings, and inference services from emerging threats. As a senior staff-level contributor, this role influences architectural security decisions, advances AI-specific threat detection and mitigation strategies, mentors engineers, and strengthens the organization's overall AI security and responsible AI posture.

• Architecting secure deployment and operating models for AI, ML, and generative AI systems across cloud and hybrid environments.
• Conducting advanced AI security testing, including adversarial ML attacks, prompt injection simulations, and RAG manipulation assessments.
• Identifying and mitigating vulnerabilities in model-serving infrastructure, feature stores, embedding pipelines, and vector databases.
• Designing guardrails, safety filters, access controls, and secure interaction patterns for LLM- and RAG-based applications.
• Developing automated tooling to detect misconfigurations, insecure endpoints, and data exposure risks within AI pipelines.
• Collaborating with cloud and DevOps teams to secure Kubernetes clusters, GPU workloads, and infrastructure-as-code deployments.
• Analyzing logs, telemetry, and model outputs to detect anomalies, abuse patterns, model degradation, or malicious activity.
• Implementing encryption, secrets management, IAM policies, and network segmentation for AI workloads.
• Leading secure design and architecture reviews for AI features, APIs, and platform components.
• Documenting threat models, attack surfaces, risk assessments, mitigations, and compliance artifacts.
• Participating in AI-specific incident response, investigation, and post-incident analysis.
• Evaluating emerging AI security technologies, including model fingerprinting, inference protection, and secure execution environments.
• Supporting enterprise adoption of responsible AI, data protection, and regulatory compliance standards.
• Mentoring junior engineers, ML engineers, and security practitioners on AI security best practices.
• Contributing to cloud security posture management capabilities for AI-enabled platforms.

Qualifications

• 4+ years of experience in cybersecurity, cloud security, ML engineering, or DevSecOps roles.
• Demonstrated experience securing AI/ML or generative AI systems in production environments.
• Strong understanding of ML pipelines, model architectures, and AI system components.
• Deep knowledge of adversarial ML attack vectors and mitigation techniques.
• Proficiency in Python, security testing tools, and cloud security frameworks.
• Ability to assess risk across distributed services, storage systems, inference APIs, and data pipelines.
• Strong communication skills and sound technical judgment in security decision-making.
• Hands-on experience with Microsoft Azure and M365 security environments.
• Willingness to travel occasionally for cross-functional planning and collaboration.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical field, or equivalent experience.
• Master's degree or advanced training in cybersecurity, AI, or related discipline.
• Security and cloud certifications such as SC-100, SC-900, SC-200, SC-300, AZ-500, AI-102, or equivalent AWS certifications.
• CISSP, CKS, or CompTIA Cloud certifications.
• Advanced experience securing AI platforms on Azure, including Kubernetes security (RBAC, network policies) and multi-tenant GPU workloads.
• Experience securing container pipelines using image scanning, signing, and policy enforcement.
• Expertise with secrets management solutions (e.g., Azure Key Vault, HashiCorp Vault).
• Experience implementing zero-trust architecture and securing CI/CD pipelines for AI systems.
• Deep knowledge of generative AI and RAG security, including prevention of prompt injections, jailbreaks, context poisoning, and embedding leakage.
• Experience designing safe-output rendering patterns, guardrails, and red-teaming processes for generative systems.
• Familiarity with emerging generative AI defense techniques such as model watermarking, inference integrity checks, and output validation frameworks.

We expect the candidate to uphold Crowe's values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.