Lead AI Security Engineer

We are seeking aLead AI Security Engineer to secure enterprise microservices APIs across web and mobile environments. You will partner with engineering and business stakeholders to improve security and observability using AI-driven detection and automation.

Responsibilities

• Implement security controls for web applications, APIs, microservices, and AI-enabled services
• Design observability for microservice REST and GraphQL APIs and critical application workflows
• Leverage AI and automation to analyze telemetry, logs, and security events to detect and investigate issues
• Identify and mitigate risks related to exposed endpoints and publicly accessible services
• Coordinate with application teams, product owners, and business stakeholders to validate workflows and resolve issues
• Communicate risks, mitigation plans, and recovery status to technical and business audiences
• Develop operational runbooks and troubleshooting procedures for recurring endpoint and API issues

Requirements

• 5+ years of experience securing APIs, web applications, and service-to-service communications
• Experience with microservices, REST APIs, GraphQL, and event-driven architectures
• Experience in AI Security and LLM application security testing, including agentic platforms
• Lead-level experience partnering with application teams and business stakeholders to drive remediation
• Strong project ownership skills to triage events and deliver secure solutions end to end
• Strong observability design skills using logs, traces, metrics, and event streams
• Strong automation and scripting skills to analyze telemetry, logs, and security events
• Strong risk assessment skills for exposed endpoints and publicly accessible services
• Strong communication skills to present findings and mitigation plans to technical and business audiences
• English proficiency at B2 (Upper-Intermediate)

Nice to have

• Akamai Application Security experience, including API Security or Bot Manager
• Dynatrace experience for logs, traces, metrics, and event streams
• Grafana experience for dashboards and alerting
• Langfuse experience for observability and telemetry analysis
• Splunk experience for log analytics and security event investigations