Req ID: 382113

We are currently seeking a Security / Compliance Engineering to join our team in Jersey City, New Jersey (US-NJ), United States (US).

AI Security & Compliance Engineer

AI/ML Security / GenAI Risk / Cloud Security / DevSecOps

Role purpose

Ensure AI and GenAI systems on AIRP are designed, deployed, and operated securely and in compliance with enterprise technology, cybersecurity, privacy, and regulatory standards. The role covers emerging LLM risks as well as traditional AWS cloud, application, data-security, DevSecOps, and IaC controls.

Client-specific emphasis

• Security must cover AWS-hosted AIRP, Terraform/IaC templates, CI/CD pipelines, cloud engineering patterns, AI applications, and model/data access controls.
• The role must help create reusable controls that work across multiple business AI use cases and can support the broader cloud-agnostic blueprint.
• Power Platform / Copilot Studio governance, data-loss prevention, connector controls, and citizen-development oversight are valuable plus areas.

Primary ownership

• Security architecture and control implementation for AI platforms, LLM applications, RAG pipelines, model-serving environments, and agentic systems.
• Threat modeling, AI red teaming, vulnerability assessment, risk remediation, and secure production approvals.
• Security evidence, control documentation, and compliance support for AIRP releases, Terraform/IaC, and DevOps pipelines.

Key responsibilities

• Design and review secure architectures for AI/ML platforms, LLM applications, RAG pipelines, model-serving environments, and agentic AI workflows.
• Conduct threat modeling for prompt injection, jailbreaks, insecure tool use, model inversion, data leakage, retrieval poisoning, adversarial inputs, unauthorized access, and third-party model risk.
• Implement controls for AWS IAM, encryption, key management, secrets management, network segmentation, API security, logging, secure data handling, and data-loss prevention.
• Embed security into MLOps, LLMOps, CI/CD, container security, infrastructure-as-code, Terraform modules, and deployment pipelines.
• Review cloud-agnostic IaC templates and AWS-specific deployments for least privilege, secure defaults, segregation of duties, policy compliance, and auditability.
• Review third-party models, APIs, open-source packages, AI tools, and vendor platforms for security, privacy, model supply-chain, and compliance risks.
• Build monitoring and alerting for suspicious AI usage, anomalous access, policy violations, unsafe interactions, and potential data leakage.
• Support AI red teaming, penetration testing, vulnerability management, incident response, remediation planning, and production-readiness reviews.
• Maintain audit-ready documentation for controls, testing, risk acceptance, remediation, and production approvals.

Basic Qualifications:

• 5+ years of experience in cybersecurity, cloud security, application security, DevSecOps, or technology risk.
• 5+ years of experience securing cloud-native platforms, APIs, microservices, containers, Kubernetes, CI/CD pipelines, and infrastructure-as-code.
• 5+ years of experience with AWS cloud security exposure or comparable hyperscaler security depth, including IAM, encryption, network controls, logging, secrets, and secure deployment patterns.
• 3+ years of experience with AI/ML and GenAI-specific risks such as prompt injection, adversarial attacks, data leakage, model misuse, retrieval poisoning, model supply-chain risk, and unsafe tool use.
• 3+ years of experience with threat modeling, vulnerability management, security testing, incident response, secure SDLC, DevSecOps, and Terraform/IaC controls.

Preferred experience

• Ability to work directly with engineering teams to implement practical, risk-based controls.
• Experience securing AI/ML platforms or GenAI applications in production.
• Financial-services security, technology risk, regulatory, compliance, privacy, or audit experience.
• Familiarity with AI red teaming, secure RAG design, LLM gateways, Power Platform governance, Copilot Studio controls, data-loss prevention, and privacy-by-design controls.

NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this role is $104,904 - $182,125 per year. Actual compensation will depend on a number of factors, including the candidate's relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance.

This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.

#LI-NorthAmerica, #DataFID

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client's needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use [redacted].com, [redacted].com and [redacted].nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us.