Make your impact within a rapidly growing Fintech Company

We are looking to hire a Sr. Staff AI Security Engineer to lead the secure deployment and operation of AI and ML systems across the company. This role moves beyond traditional perimeter security to address the unique vulnerabilities of Large Language Models (LLMs) and automated orchestration layers. Your mission: provide a secure foundation—gateways, orchestration layers, and tool ecosystems—that enables developers to innovate at pace while maintaining a robust security posture.

You'll partner with platform ,engineering and IT teams as a builder and enabler rather than a gatekeeper, embedding security into the AI development lifecycle by default and shaping how BILL navigates the AI threat landscape.

Secure AI Architecture & Infrastructure: Design and implement secure gateways that act as controlled entry points for AI requests, ensuring all interactions are authenticated and logged. Build orchestration layers that enforce security policies (rate limiting, content filtering) across multiple AI models and providers. Integrate security controls into developer tool ecosystems so security is baked in by default—highly available, scalable via infrastructure as code, and never a performance bottleneck for production AI applications.

Adversarial Research & Red-Teaming: Own and stand up a formal AI red-teaming practice to identify vulnerabilities before they reach production. Research and simulate advanced attack vectors including prompt injection, jailbreaking, adversarial suffixes, model extraction, model poisoning, training data leakage, and AI supply chain compromise. Systematically document findings and deliver clear remediation paths to engineering teams.

Strategic Leadership: Own the long-term AI security roadmap, aligning technical goals with BILL's business mission. Act as the primary subject matter expert advising senior leadership on AI risk. Mentor engineers across the organization to raise BILL's collective security IQ.

Responsibilities

• Design, build, and operate secure AI gateways and policy orchestration layers spanning multiple AI models and service providers
• Configure end point settings for AI tools in collaboration with IT end point management solutions.
• Stand up and lead a formal AI red-teaming practice covering prompt injection, jailbreaking, model extraction, and emerging attack vectors
• Identify and mitigate AI-specific threats across input manipulation, supply chain (model weights, datasets, third-party AI libraries), data privacy (training data leakage, PII disclosure), and model integrity (poisoning, unauthorized fine-tuning)
• Automate security checks and guardrails to enable rapid development cycles without sacrificing security posture
• Apply and operationalize the OWASP LLM Top 10 framework to categorize and mitigate risk
• Own the AI security roadmap and advise senior leadership on AI risks and safe adoption
• Embed with platform teams as a partner, fostering a collaborative security culture
• Mentor fellow engineers on AI security best practices
• Document and report vulnerabilities with clear remediation guidance and technical direction

We'd love to chat if you have:

• A proven track record of building and scaling security systems in high-growth environments
• High proficiency in Python or Go to build, automate, and scale security tooling
• Deep understanding of LLM-specific attack vectors: prompt injection and jailbreaking
• Deep understanding and applied experience with the OWASP LLM Top 10 framework
• Experience designing secure API gateways, orchestration layers, and scalable security infrastructure using infrastructure as code
• Experience standing up red-teaming or adversarial testing programs
• A strong grasp of AI/ML fundamentals, including model supply chain and data privacy risks
• A builder mentality and passion for the AI space—you enable development through secure architecture rather than blocking it
• The ability to influence senior leadership and mentor engineers across the organization
• A background in Computer Science, Cybersecurity, or a related technical field

Visa Sponsorship: Please note that this position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.

#LI