Senior AI Information Security Engineer
公司:光与奇迹的企业团队由企业中工作的令人难以置信的人才组成,挑战界限,以提供必要服务以确保组织成功和员工福祉。职位总结高级人工智能工程师将领导设计,开发和部署代理 AI 系统以及安全 AI 能力在整个企业中。向全球 CISO 报告到参谋长,该角色拥有人工智能代理商,自动化管道和 LLM 基于的工作流程的实践发展,同时确保它们满足安全,合规和治理要求。工程师将与信息安全,法律,合规性,隐私,IT 和工程合作,从概念到生产中运用 AI 的应用案例。关键责任:代理人工智能开发 ·设计,构建和拥有生产级代理 AI 系统包括多步骤代理,使用工具的 LLM 管道,检索增强生成 (RAG) 工作流程以及自动决策系统。·开发和维护公司内部代理人工智能的平台,包括代理编排,内存管理,工具集成和循环审查工作流程。· 确定跨商业功能高价值的代理使用案例,并从要求到部署和监控提供端到端的工作解决方案。· 为代理系统建立防护,安全模式和评估框架,包括输出验证,升级逻辑和审计性.AI 安全工程 · 对人工智能工具和工作流进行安全控制:数据处理,访问控制,记录,监测,快速注射减轻以及可接受用途执行。·对 LLM 集成,代理工作流,API 和第三方 AI/SaaS 解决方案进行安全审查和威胁建模。·识别和缓解特定风险:通过技术指导,架构输入和实施证据支持人工智能治理和合规活动。安全工程与自动化 · 使用 Python,PowerShell,REST API 和工作流程自动化平台开发脚本,集成和轻量级应用程序。·建立并维护 SIEM 检测,SOAR 播放书籍,仪表板和报告能力,包括为人工智能启用的工作流程的远程测量。·工程师。
查看英文原文
Corporate:
Light & Wonder’s corporate team is comprised ofincredible talent that works across the enterprise, defying boundaries to provide essential services in an extraordinary manner to ensure the success of the organization and the well-being of employees.
Position Summary
The Senior AI Engineer will lead the design, development, and deployment of agentic AI systems and secure AI capabilities across the enterprise. Reporting to the Chief of Staff to the Global CISO, this role owns hands-on development of AI agents, automation pipelines, and LLM-based workflows while ensuring they meet security, compliance, and governance requirements. The engineer will partner with Information Security, Legal, Compliance, Privacy, IT, and Engineering to take AI use cases from concept to production.
Key Responsibilities:
Agentic AI Development
- Design, build, and own production-grade agentic AI systems — including multi-step agents, tool-using LLM pipelines, retrieval-augmented generation (RAG) workflows, and automated decision-making systems.
- Develop and maintain the company’s internal agentic AI platform, including agent orchestration, memory management, tool integrations, and human-in-the-loop review workflows.
- Identify high-value agentic use cases across business functions and deliver working solutions end-to-end, from requirements through deployment and monitoring.
- Establish guardrails, safety patterns, and evaluation frameworks for agentic systems, including output validation, escalation logic, and auditability.
AI Security Engineering
- Implement and maintain security controls for AI tools and workflows: data handling, access controls, logging, monitoring, prompt injection mitigations, and acceptable-use enforcement.
- Perform security reviews and threat modeling for LLM integrations, agentic workflows, APIs, and third-party AI/SaaS solutions.
- Identify and mitigate AI-specific risks: sensitive data exposure, over-permissioned agents, insecure tool use, supply-chain exposure, and inadequate human oversight.
- Support AI governance and compliance activities with technical guidance, architecture input, and implementation evidence.
Security Engineering & Automation
- Develop scripts, integrations, and lightweight applications using Python, PowerShell, REST APIs, and workflow automation platforms.
- Build and maintain SIEM detections, SOAR playbooks, dashboards, and reporting capabilities, including telemetry for AI-enabled workflows.
- Engineer security improvements across identity, cloud, SaaS, endpoint, and data protection domains.
- Respond to security incidents involving AI tools, data exposure, and automation failures.
Collaboration & Governance
- Translate business and control objectives into secure AI designs, prototypes, and production capabilities.
- Manage and communicate project status, risk decisions, and implementation progress to stakeholders.
- Maintain standard operating documentation for knowledge transfer, audit readiness, and disaster recovery.
Qualifications
Technical Competencies
Required
- Agentic AI development: agent frameworks (e.g., LangChain, AutoGen, CrewAI), LLM APIs, tool use, RAG, vector databases, prompt engineering, and safety guardrails.
- Python development, REST APIs, and workflow automation; scripting in PowerShell or similar.
- Security architecture across identity, cloud, SaaS, endpoint, network, application, and data protection.
- SIEM management, log onboarding, detection engineering, and alert tuning.
- SOAR platforms, ticketing integrations, and automated playbook development.
Preferred
- Cloud and SaaS security: identity providers, CASB/SSE, DLP, key/secrets management.
- Application and API security, vulnerability scanning, DevSecOps, and secure SDLC.
- AI security and governance: NIST AI RMF, OWASP LLM Top 10, model risk, auditability, and policy enforcement.
- SIEM/SOAR platforms, endpoint security, web application firewalls, and threat intelligence tooling.
- ISO 27001, NIST CSF, privacy frameworks, and common risk management terminology.
Education & Experience
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Data Science, or equivalent experience.
- 5+ years in cybersecurity, security engineering, application security, or a related field.
- 3+ years in security operations, security engineering, DevSecOps, or cloud security.
- 2+ years of hands-on AI/ML development, agentic systems, automation, or data engineering.
- Demonstrated ability to deliver cross-functional technical projects end-to-end.
Certifications (Preferred)
- CISSP, CISM, or CISA.
- SANS GIAC (cloud, incident response, application security, or automation focus).
- Cloud security certifications (CCSK, CCSP, or major cloud provider).
- AI governance, ML security, or secure software development coursework or certification.
Work Environment
Office, remote, or hybrid as assigned. Occasional participation in incident response, change windows, or project activities outside standard business hours may be required.
The targeted pay range for this role is $170,000-$180,000. The total compensation package for this position may also include applicable incentive compensation, such as an annual performance bonus. Actual compensation packages are based on several factors that may include, but are not limited to skill set, depth of experience, specific work geography, as well as internal equity and alignment with market data.
Light & Wonder and its affiliates (collectively, “L&W”) are engaged in highly regulated gaming and lottery businesses. As a result, certain L&W employees may, among other things, be required to obtain a gaming or other license(s), undergo background investigations or security checks, or meet certain standards dictated by law, regulation, or contracts. In order to ensure L&W complies with its regulatory and contractual commitments, as a condition to hiring and continuing to employ its employees, L&W requires all its employees to meet those requirements that are necessary to fulfill their individual roles. As a prerequisite to employment with L&W (to the extent permitted by law), you shall be asked to consent to L&W conducting a due diligence/background investigation on you.
This job description should not be interpreted as all-inclusive; it is intended to identify major responsibilities and requirements of the job. The employee in this position may be requested to perform other job-related tasks and responsibilities than those stated above.
Light & Wonder is an Equal Opportunity Employer and does not discriminate against applicants due to race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. If you’d like more information about your equal employment opportunity rights as an applicant under the law, please click here for EEOC Poster.
Originally posted on Himalayas