应用AI安全工程师
Applied AI Security Engineer
Waabi由人工智能先驱Raquel Urtasun创立，是物理AI领域的领导者。凭借世界级的团队，我们正在通过技术开启自动驾驶运输的新时代，这些技术正在为商用自动驾驶卡车和机器人出租车提供支持。Waabi得到了人工智能、汽车、物流和深度科技领域领导企业的投资并与其合作。
Waabi在多伦多、旧金山、达拉斯和匹兹堡设有办公室，正在快速成长，寻找具有多样性、创新性和协作精神的候选人，希望他们能以积极的方式影响世界。如需了解更多信息，请访问：www.waabi.ai
Waabi正在采用AI原生策略——不仅在我们的卡车中，而且在我们每天构建、发布和运营的方式中。我们的团队利用关键的AI工具来提高生产力和效率，并持续扩大AI在系统和工作流程中的整合。这带来了巨大的突破，而且进展迅速。我们正在寻找一位确保这一切安全快速推进的人——通过建立保障机制，并与团队合作实施沙盒和自动化，让员工能够放心地使用AI，而不是反复质疑自己。你将加入一个精锐的安全团队，并负责公司范围内AI安全控制和考虑事项的主要职责。如果你具备开发者的直觉、安全的思维，并且真正好奇这些工具能做什么、不能做什么，那么这个职位就是为你量身打造的。
你将…
- 审计公司内当前AI工具和MCP集成的使用情况，并绘制它们如何接触到敏感系统、数据或凭证，以制定相关政策。
- 设计并实现分层的保障机制——企业级系统提示、作用域权限、沙盒模式——在AI行为到达用户请求之前进行约束。
- 维护MCP服务器和AI到服务连接及其数据访问控制的清单，并建立清晰的模型，说明每个连接可以访问什么内容以及原因。
- 直接与组织内的用户合作，将默认安全的模式嵌入他们的AI辅助工作流程中，使书面政策不会只是停留在文件柜里。
- 评估新的AI工具、插件和集成请求，并找出安全地说“可以”的方式。
- 持续测试和对自身保障机制进行红队攻击——假设它们会被挑战，提前找到漏洞。
- 编写指导文档和模式，让非安全背景的人员也能实际遵循。
查看英文原文
Waabi, founded by AI visionary Raquel Urtasun, is the leader in Physical AI. With a world-class team, we're unlocking the next era of autonomous transportation with technology that's powering commercial autonomous trucks and robotaxis. Waabi is backed by and partners with world leaders in AI, automotive, logistics, and deep tech.
With offices in Toronto, San Francisco, Dallas, and Pittsburgh, Waabi is growing quickly and looking for diverse, innovative and collaborative candidates who want to impact the world in a positive way. To learn more visit: www.waabi.ai
Waabi is leaning into an AI-native strategy — not just in our trucks, but in how we build, ship, and operate every day. Our teams leverage key AI tools to enhance productivity and efficiency, continuously expanding AI integration across our systems and workflows. That's a huge unlock, and it's moving fast. We're looking for someone to make sure it keeps moving fast safely — by establishing the guardrails and collaborating on the implementation of sandboxes and automations that let people adopt AI with confidence instead of second-guessing themselves. You'll join a small, sharp security team and take primary ownership of AI security controls and considerations across the company. If you've got a developer's instincts, a security mindset, and you're genuinely curious about what these tools can and can't be trusted to do, this role is built around you.
You will...
- Audit how AI tools and MCP integrations are currently used across the company, and map where they touch sensitive systems, data, or credentials for the purpose of defining policy.
- Design and implement layered guardrails - enterprise-level system prompts, scoped permissions, sandboxing patterns - that constrain AI behavior before it ever reaches a user's request.
- Maintain an inventory of both MCP servers and AI-to-service connections and their data access controls, with a clear model of what each one can access and why.
- Partner directly with users across the organization to bake secure-by-default patterns into their AI-assisted workflows so that written policy doesn’t just sit on a shelf.
- Evaluate new AI tools, plugins, and integration requests, and figure out the secure way to say yes.
- Continuously test and red-team your own guardrails - assume they'll be pushed on, and find the gaps before someone else does.
- Document guidance and patterns that a non-security audience can actually follow without needing a security background.
Qualifications:
- Bachelor's degree in Computer Science or a related field.
- Professional software development experience, with solid fundamentals in how services, APIs, and permissions fit together.
- Hands-on experience using AI coding/productivity tools (Claude, Copilot, Gemini, or similar) in business-critical workflows.
- Working knowledge of core security concepts — least privilege, sandboxing, trust boundaries, threat modeling basics.
- Strong communication skills - you work with engineers as a partner.
Bonus:
- Experience with MCP (Model Context Protocol) or similar tool-calling/agent-integration frameworks.
- Exposure to prompt injection, jailbreaking, or other AI/LLM-specific attack techniques.
- Background in autonomous vehicles, robotics, or other safety-critical systems
The US yearly salary range for this role is: $139,000- $258,000 USD and the Canada salary range for this role is: $118,000 - $168,000 CAD in addition to competitive perks & benefits. Waabi US Inc. and Waabi Canada Inc.'s yearly salary ranges are determined based on several factors in accordance with the Company’s compensation practices. The salary base range is reflective of the minimum and maximum target for new hire salaries for the position across all US and Canada locations. Note: The Company provides additional compensation for employees in this role, including discretionary equity incentive awards and discretionary annual performance bonus.
Perks/Benefits:
Waabi provides a competitive benefits package that includes:
Competitive compensation and equity awards.
Health and Wellness benefits that include Medical, Vision and Dental coverage.
Unlimited Vacation.
Flexible hours and Work from Home support.
Daily drinks, snacks and catered meals (when in office).
Regularly scheduled team building activities and social events.
As we grow, this list continues to evolve!
Waabi is a technology start-up building technologies to transform the way the world moves. Join our talented team to be a part of the future and to make an impact!
Waabi is an equal opportunity employer. We celebrate diversity and are committed to creating a supportive, inclusive, and accessible workplace for all our employees. We seek applicants of all backgrounds and identities, across race, color, ethnicity, national origin or ancestry, age, citizenship, religion, sex, sexual orientation, gender identity or expression, military or veteran status, marital status, pregnancy or parental status, caregiver status, disability, or any other characteristic protected by law. We make workplace accommodations for qualified individuals with disabilities as required by applicable law. If reasonable accommodation is needed to participate in the job application or interview process please let our recruiting team know.