Spring Health

Staff Security and AI Engineer

Spring Health

full-time

Posted on:

Location Type: Hybrid

Location: San Francisco • California • United States

Visit company website

Explore more

✨ AI Apply
Apply

Salary

💰 $239,200 - $270,000 per year

Job Level

Lead

About the role

  • Define and evolve our AI security strategy to protect highly sensitive mental health data across both product and corporate environments
  • Lead secure design and threat modeling for AI systems including LLMs, agentic workflows, and retrieval pipelinesIdentify and mitigate risks such as prompt injection, data exfiltration, model abuse, and privilege escalation
  • Build scalable AI security guardrails and tooling that enable safe experimentation across engineering and business teams
  • Establish AI-specific governance frameworks covering identity, access control, auditability, and observability
  • Take ownership of and lead our AI Red Team to proactively identify vulnerabilities
  • Design and implement AI observability pipelines to detect anomalous model behavior and policy violations in near real-time
  • Develop and operationalize AI incident response playbooks to ensure rapid containment of security eventsPartner with product and engineering teams to enable responsible AI innovation in a hyper-growth environment
  • Champion a culture of secure AI development by mentoring engineers and defining high standards for the organization

Requirements

  • 10+ years experience in a software engineering discipline, with at least 5+ years focused on security
  • Hands-on experience securing AI/ML systems, including practical AI red teaming against LLMs, agentic workflows, or RAG systems
  • Experience developing or implementing automated LLM vulnerability testing for prompt injection and data exfiltrationStrong foundation in application security principles, threat modeling, secure design, and identity and access control
  • Demonstrated ability to build tools and automation with a developer mindset
  • Experience influencing senior engineers and cross-functional stakeholders across product, legal, and complianceProven track record of mentoring engineers and cultivating a strong security culture across an organization
  • Strong working knowledge of modern developer tooling, CI/CD pipelines, and git-based collaboration
  • Ability to operate in ambiguity and translate emerging AI risks into pragmatic, scalable security controls
  • Deep personal ownership and a passion for advancing AI security through continuous learning
Benefits
  • Health, Dental, Vision benefits start on your first day at Spring. You and your dependents also receive access to One Medical accounts HSA and FSA plans are also available, with Spring contributing up to $1K for HSAs, depending on your plan type.
  • Employer sponsored 401(k) match of up to 2% for retirement planning
  • A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents.
  • We offer competitive paid time off policies including vacation, sick leave and company holidays.
  • At 6 months tenure with Spring, we offer parental leave of 18 weeks for birthing parents and 16 weeks for non-birthing parents.
  • Access to Noom, a weight management program—based in psychology, that’s tailored to your unique needs and goals.
  • Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses.
  • Access to Wellhub, which connects employees to the best options for fitness, mindfulness, nutrition, and sleep in one subscription
  • Access to BrightHorizons, which provides sponsored child care, back-up care, and elder care
  • Up to $1,000 Professional Development Reimbursement a year.
  • $200 per year donation matching to support your favorite causes.
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
AI security strategythreat modelingprompt injectiondata exfiltrationAI observability pipelinesincident response playbooksapplication security principlesautomated LLM vulnerability testingidentity and access controlsecure design
Soft Skills
mentoringinfluencingownershipcommunicationcollaborationleadershipproblem-solvingadaptabilityculture buildingcontinuous learning