Sr. Staff AI Security Engineer

Bill.com is hiring a Sr. Staff AI Security Engineer to help lead the secure deployment and ongoing operation of AI and ML systems. In this role, you will focus on hardening LLM usage and the orchestration layers that connect models, policies, and services, using concrete security controls, red-teaming, and a risk-based roadmap aligned to OWASP’s guidance.

This position is based in Draper, UT (remote), with an annual salary range of USD 165,200 - 206,600. The San Jose, pay range listed for this role is $194,300 - $243,000 USD.

What you’ll do

• Design, build, and operate secure AI gateways and policy orchestration layers across multiple AI models and service providers
• Configure end point settings for AI tools in collaboration with IT end point management solutions
• Stand up and lead a formal AI red-teaming practice covering prompt injection, jailbreaking, model extraction, and emerging attack vectors
• Identify and mitigate AI-specific threats across input manipulation, model supply chain risks (model weights, datasets, third-party AI libraries), data privacy risks (training data leakage and PII disclosure), and model integrity threats (poisoning and unauthorized fine-tuning)
• Automate security checks and guardrails to support rapid development cycles while maintaining security posture
• Apply and operationalize the OWASP LLM Top 10 framework to categorize and mitigate risk
• Own the AI security roadmap and advise senior leadership on AI risks and safe adoption
• Work as a partner with platform teams to help cultivate a collaborative security culture
• Mentor fellow engineers on AI security best practices
• Document and report vulnerabilities with clear remediation guidance and technical direction

What you bring

• A proven track record of building and scaling security systems in high-growth environments
• High proficiency in Python or Go to build, automate, and scale security tooling
• Deep understanding of LLM-specific attack vectors, including prompt injection and jailbreaking
• Deep understanding and applied experience with the OWASP LLM Top 10 framework
• Experience designing secure API gateways, orchestration layers, and scalable security infrastructure using infrastructure as code
• Experience standing up red-teaming or adversarial testing programs
• A strong grasp of AI/ML fundamentals, including model supply chain and data privacy risks
• A builder mindset focused on enabling development through secure architecture rather than blocking it
• The ability to influence senior leadership and mentor engineers across the organization
• Background in Computer Science, Cybersecurity, or a related technical field

Technologies you’ll work with

• Python
• Go
• OWASP LLM Top 10
• Infrastructure as code
• AI/ML
• LLMs

Benefits

• 100% paid employee health, dental, and vision plans (choose HMO, PPO, or HDHP)
• HSA & FSA accounts
• Life Insurance, Long & Short-term disability coverage
• Employee Assistance Program (EAP)
• 11+ Observed holidays and wellness days and flexible time off
• Employee Stock Purchase Program with employee discounts
• Wellness & Fitness initiatives
• Employee recognition and referral programs
• Medical, dental, vision, life and disability insurance
• 401(k) retirement plan
• Flexible spending & health savings account
• Paid holidays
• Paid time off
• Other company benefits

Visa sponsorship

This position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.