Staff AI Security Engineer

About this role

<div class="content-intro"><div class="elementToProof"> <p>Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.</p> </div></div><h4><strong>About the Role</strong></h4> <p>Veeam <span data-highlighted="true" data-vc="highlighted-text">VDC</span> <span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">Security Engineering</span> builds and operates the <span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">security</span> platform for a multi-<span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">cloud</span> (<span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">Azure</span> and <span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">AWS</span>) SaaS serving regulated industries. This role sits in Platform <span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">Security</span> and helps drive AI/LLM <span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">security</span> as a discipline. You will help shape how <span data-highlighted="true" data-vc="highlighted-text">VDC</span> uses large language models safely (defensively, at scale) and how we use them offensively to find and fix real <span class="Highlight ht7c30df18-a5dc-43bb-a314-7cd75de6c4f0">security</span> defects faster than traditional programs allow.</p> <h4 id="id-📝JobDescription&amp;JobPostGuidelines-WhatYou’llDo.1"><strong>What You’ll Do</strong></h4> <ul> <li>Design and ship the data-handling controls (code, filters, and infrastructure guardrails) for VDC's internal AI tooling and the AI features in our product. Redact <span id="663ffd74-ad99-40c4-bec7-3e4d69942070" data-mark-type="annotation" data-mark-annotation-type="inlineComment" data-id="663ffd74-ad99-40c4-bec7-3e4d69942070" data-prosemirror-content-type="mark" data-prosemirror-mark-name="annotation">sensitive data</span> from prompts, model context, logs, and outputs before any of it reaches a third-party model provider</li> <li>Build and productionize an AI-enhanced vulnerability reduction capability that plugs into CI/CD, surfaces real defects with a low false-positive rate, and either recommends or applies remediation without eroding developer trust</li> <li>Publish and evolve a self-serve secure-LLM-use pattern for other VDC engineering teams, including input filtering, output validation, provider-tier data classification, and threat-model shortcuts for teams adding AI features to their products</li> <li><span id="6469aed2-7fab-4796-91fd-4c0d5cb78b49" data-mark-type="annotation" data-mark-annotation-type="inlineComment" data-id="6469aed2-7fab-4796-91fd-4c0d5cb78b49" data-prosemirror-content-type="mark" data-prosemirror-mark-name="annotation">Threat-model internal AI tools for prompt injection, indirect prompt attack surfaces, model exfiltration, and agent-tool boundary weaknesses. Partner with the red team on findings, then build the fixes and guardrails with tool owners</span></li> <li>Partner with Compliance to shape auditor-facing evidence for AI-assisted controls, including which evidence formats hold up when the collector was an LLM and where human review must gate disclosure</li> <li>Contribute the AI-security lens to adjacent Security Engineering programs where LLMs touch the surface area: vulnerability management maturity, supply chain risk reduction, code owners routing, and compliance evidence collection</li> <li>Set VDC's direction on emerging LLM security tools and internal AI-forward workflows: what to adopt, what to skip, and what to build in-house</li> </ul> <h4 id="id-📝JobDescription&amp;JobPostGuidelines-TechnologiesYou’llWorkWith.1"><strong>Technologies You’ll Work With</strong></h4> <ul> <li>Azure OpenAI Service and other Azure AI Foundry components</li> <li>Anthropic Claude, OpenAI, and multi-provider LLM APIs used across VDC internal tools</li> <li>Microsoft Presidio, custom redaction pipelines, or equivalent PII/secrets detection at the prompt boundary</li> <li>Cycode (SAST / SCA / Secrets) and Wiz for signal fusion into AI-driven remediation</li> <li>GitHub Actions and Azure DevOps for CI/CD integration of security-review LLM tooling</li> <li>Python and Go for the AI security tooling stack; comfort reading PowerShell and TypeScript for integration points</li> <li>Microsoft Sentinel and Log Analytics for the audit trail on AI-mediated security operations</li> </ul> <h4 id="id-📝JobDescription&amp;JobPostGuidelines-WhatYou’llDo.1"><strong>What You’ll Bring</strong></h4> <ul> <li>10+ years across security and engineering, with recent focus on AI/ML systems in production (LLM deployments, model risk, or AI-driven security tooling)</li> <li>Hands-on experience shipping controls (Code, infra or data gaurdrails) that operate on LLM inputs and outputs (redaction, filtering, output validation, prompt-injection defense)</li> <li>Build and tune detection systems that catch PII and secrets (API keys, credentials, personal data) across large, messy datasets, knowing when a regex rule is good enough, when you need a trained classifier, and when only an LLM can catch it, and justifying that choice on cost, latency, and accuracy grounds</li> <li>Track record of taking AI/security work from concept to production, including designing for developer trust and false-positive management</li> <li>Strong cloud security fundamentals across Azure and AWS: RBAC, secret management, key handling, network egress controls</li> <li>