Senior AI Security Engineer

Location: US - Remote

Department: Security

Location Type: REMOTE

Employment Type: FULL_TIME

Company Overview:

Role:

Key Responsibilities: 

• Implement security controls for AI agents, tools, memory, and data access.
• Build agent identity, authorization, scoped credentials, least privilege permissions, and approval requirements.
• Apply secure patterns for context retrieval, member data isolation, and agent memory.
• Create evaluations for prompt injection, sensitive data disclosure, unsafe tool use, memory poisoning, and unauthorized actions.
• Turn discovered vulnerabilities into automated regression tests and release gates.
• Implement runtime safeguards for tool calls, network access, data egress, and resource use.
• Review agent tools, model integrations, and internal APIs for authorization, input validation, data exposure, and abuse risks.
• Build logging and monitoring that supports investigation without exposing sensitive health information.
• Perform threat modeling, manual assessment, and targeted adversarial testing of AI applications.
• Partner with engineers to remediate findings and improve product architecture.
• Contribute reusable security libraries, reference implementations, and engineering documentation.
• Support incident investigations involving AI systems or member data.
• Help improve and operationalize Function’s standards for secure AI development.

Qualifications/Skills:

• Five or more years of experience across software engineering, AI engineering, product security, application security, cloud security, or related disciplines.
• Production experience building or securing AI agents, machine learning systems, data platforms, or model integrated applications.
• Strong Python and backend engineering skills.
• Understanding of authentication, authorization, data isolation, secrets management, secure API design, and application security fundamentals.
• Experience with agent tools, retrieval, memory, evaluations, model integrations, or AI orchestration frameworks.
• Ability to identify practical attack paths and translate them into engineering controls and tests.
• Familiarity with cloud infrastructure, workload identity, containers, and service monitoring.
• Experience working directly with product and engineering teams.
• Clear written communication and the ability to document technical decisions.

To be a strong fit, you embody our Core Values:

• Ruthless Prioritization:
  • We don’t let perfect get in the way of progress.
  • We move quickly to drive value, not perfection.
  • We prioritize what drives impact.
  • We never compromise on standards of excellence.
• Member-First, Always:
  • We design and deliver like we’re caring for someone we love.
  • We create calendar, actionable, human experience.
  • We prioritize responsiveness, peace of mind, and outcomes.
  • We empower members with truth, clarity, and care.
• One Team, Moving Fast:
  • We are aligned in purpose, prioritization, and speed.
  • We gather diverse perspectives to make informed decisions.
  • We clear paths for each other and move fast together.
  • We communicate clearly and respectfully, rallying around shared goals.
• Radical Ownership, Relentless Execution:
  • We don’t just ship– we own outcomes and drive results.
  • We act with urgency and precision
  • We anticipate, initiate, and follow through.
  • We meet challenges with grit and pragmatism.
  • We embrace new tech to deliver better outcomes.
• Mission Over Ego:
  • We are ruthlessly aligned to our mission– and leave ego at the door.
  • We disagree and commit.
  • We don't tolerate politics or withholding information.
  • We operate with honesty, transparency, and respect.
• Sustained Integrity in Every Detail:
  • We earn trust by obsessing over accuracy, quality, and clarity in everything we do.
  • We prioritize clinical precision– data must be right.
  • We sweat the details because outcomes depend on them.

Why You'll Love Working With Us: