Senior Associate - AI Security Engineer

New York Life seeks a hands-on AI Security Engineer to assess emerging AI technologies and turn security problems into working prototypes across cloud and third-party platforms.

Responsibilities

• Partner with the AI Security Architect to build, test, and evaluate AI security solutions across cloud and third-party platforms
• Translate emerging AI security challenges into working prototypes
• Validate security capabilities and vendor claims
• Identify and document technical risks
• Develop reusable security patterns that engineering teams can apply
• Focus on agentic AI security, including:
  • Agent identity
  • Authentication and authorization
  • Workload identity
  • Model Context Protocol (MCP) security
  • Policy enforcement
  • Tool access
  • Secure agent-to-agent communication
• Provide hands-on experience across software development, AI applications and agents, APIs, cloud platforms, identity and authorization flows, security testing, and technical documentation

Requirements

• 5+ years of experience in software engineering, cybersecurity engineering, cloud security, application security, AI/ML engineering, or related technical disciplines, with demonstrated security application to modern applications
• Hands-on experience with at least one agent framework such as Google ADK, LangChain, LangGraph, or similar
• 2+ years hands-on experience with AI/ML, Generative AI, LLM applications, or agentic AI technologies
• Strong programming and prototyping skills, preferably in Python
• Hands-on experience building or integrating:
  • LLM applications
  • RAG solutions
  • AI agents
  • Tool-calling workflows
  • MCP-based applications
• Practical experience with at least one major cloud platform: AWS, Azure, or GCP
• Strong understanding of OAuth 2.0, OIDC, JWTs, workload and service identities, API authorization, and short-lived credential models
• Experience with modern engineering technologies including REST APIs, Git, containers, Kubernetes, CI/CD, Infrastructure-as-Code, cloud SDKs, and CLIs
• Strong understanding of application security concepts: API security, identity and access control, data protection, threat modeling, least privilege, secrets management, and secure SDLC
• Ability to independently research emerging technologies, build prototypes, troubleshoot complex technical issues, and clearly communicate findings and recommendations

Technologies

• Google ADK
• LangChain
• LangGraph
• Python
• LLM
• RAG
• MCP
• OAuth 2.0
• OIDC
• JWTs
• REST APIs
• Git
• containers
• Kubernetes
• CI/CD
• Infrastructure-as-Code
• cloud SDKs
• CLIs
• AWS
• Azure
• GCP
• Terraform
• OWASP AI security guidance
• MITRE ATLAS
• NIST AI RMF
• GitHub Copilot
• Claude Code
• Cursor

Preferred Qualifications

• Hands-on experience with MCP, agent frameworks, multi-agent architectures, or agentic AI security
• Experience with AI security testing, including prompt injection, jailbreaks, data poisoning, insecure tool use, and excessive agency
• Familiarity with one of: OWASP AI security guidance, MITRE ATLAS, NIST AI RMF
• Experience evaluating security products or conducting technical vendor PoCs
• Experience with Terraform or other Infrastructure-as-Code technologies
• Hands-on experience with AI-assisted development tools such as GitHub Copilot, Claude Code, Cursor, or similar tools
• Experience within financial services or another regulated industry

Location and Work Model

• Location: New York, NY, United States (hybrid)
• Role location designation: Hybrid - 3 days per quarter
• Requisition ID: 95346
• Department / Job function: Tech Data AI Ventures

Compensation and Eligibility

• Salary range: USD 111,500 - 159,000 per year
• Overtime eligible: Exempt
• Discretionary bonus eligible: Yes
• Sales bonus eligible: No

Benefits

• Leave programs
• Adoption assistance
• Student loan repayment programs