Security Engineer

• Build and deploy AI/LLM-powered tooling to accelerate security workflows — alert triage, incident investigation, threat detection, and log analysis.
• Develop AI agents and automations that reduce manual toil in the SOC (e.g., enrichment, summarization of detections, first-pass triage).
• Integrate AI capabilities into existing security tooling (SIEM, EDR/CrowdStrike, vulnerability management, phishing analysis).
• Partner with engineering teams to integrate AI-assisted secure coding, code review, and vulnerability detection into the development lifecycle.
• Build guardrails and automated security checks into AI-assisted coding tools and CI/CD pipelines.
• Assess and secure AI/ML components that engineering teams ship in products (prompt injection, model abuse, data leakage, insecure output handling).
• Develop reference patterns and paved-road tooling so developers can adopt AI securely by default.
• Threat-model AI-enabled features and applications, mapping to frameworks like the OWASP LLM Top 10 and MITRE ATLAS.
• Define and maintain the organization's AI acceptable-use policy and secure-adoption standards.
• Establish a review/intake process for evaluating and approving new AI tools, vendors, and use cases.
• Assess data-handling and privacy risks of AI tools (what data goes where, training/retention terms, regional compliance).
• Align AI governance with regulatory and framework requirements (e.g., NIST AI RMF, ISO/IEC 42001, SOC 2, PCI DSS where applicable).
• Educate and enable employees on safe AI use through training, guidance, and clear escalation paths.

Senior AI Security Engineer

• Assess and harden Google Workspace security configurations, including MFA enforcement, administrator privilege reviews, security policies, sharing controls, audit logging, and third-party OAuth/application access.
• Conduct identity and access governance reviews, including user/group/admin access validation, privileged access reviews, MFA coverage assessments, OAuth/SSO application inventory reviews, and joiner/mover/leaver process evaluations.
• Develop and maintain cybersecurity documentation, including remediation plans, governance procedures, exception registers, evidence packages, quarterly access review templates, and executive-ready reports.
• Build and analyze endpoint inventories and assess security controls such as device encryption, patch management, local administrator rights, screen-lock policies, device enrollment, and offboarding/wipe procedures.
• Provide decision support and recommendations regarding endpoint management and security solutions, including Google Endpoint Management, Microsoft Intune, CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, and MSP/MSSP-managed models (decision support only; no tooling implementation required).
• Collaborate with project stakeholders while adhering to established documentation standards, confidentiality requirements, and quality review processes.

Security Engineer jobs in Latin America

See all jobs on JobTailor

Senior AI Security Engineer

Google Workspace Security Architect