AI Security Engineer - Assistant Vice President / Vice President

About the role

<p class="p1"><strong>About the Role</strong></p> <p class="p2">iCapital is looking for an <strong>Assistant Vice President / Vice President, AI Security Engineer</strong> to join the Security Engineering team,&nbsp;within the Information Security organization. As iCapital's first dedicated AI Security hire, this is an&nbsp;opportunity to establish and lead the firm's AI Security Engineering practice as its subject-matter expert:&nbsp;defining how iCapital adopts AI safely across software development, its platform, and emerging agentic&nbsp;systems, and putting the standards, guardrails, and tooling in place to make that possible. The ideal&nbsp;candidate is an experienced security engineer with strong cloud security and hands-on AI security&nbsp;expertise from prior roles, who can architect from the ground up, build and maintain tooling directly, and&nbsp;partner cross-functionally across a regulated fintech environment.</p> <p class="p1"><strong>Responsibilities</strong></p> <ul> <li class="p2">Define and lead iCapital's AI security strategy and secure-by-design standards, in partnership with iCapital's AI team, spanning AI-assisted development and AI/GenAI platform capabilities.</li> <li class="p2">Establish governance, monitoring, and controls for AI coding assistants and their MCP integrations,&nbsp;bringing visibility to how AI is used across the developer population.</li> <li class="p2">Conduct threat modeling and security design reviews of AI systems and integrations, mapping identified risks to established AI security frameworks.</li> <li class="p2">Design and implement AI guardrails, including prompt injection defenses, output validation, and&nbsp;data protection, and embed them into engineering workflows and CI/CD pipelines.</li> <li class="p2">Define security architecture for autonomous and semi-autonomous agents, including least-privilege tool access, agent identity, and human-in-the-loop controls for high-risk actions.</li> <li class="p2">Architect and assess the security of AI/ML&nbsp;workloads running on AWS.</li> <li class="p2">Build and operate agentic AI workflows that strengthen Security Engineering and InfoSec&nbsp;operations, such as alert triage, enrichment, and detection engineering.</li> <li class="p2">Partner with the SOC to build detection and response capabilities for AI-specific threats, such as&nbsp;anomalous agent behavior or misuse of AI-granted access.</li> <li class="p2">Advise and support Engineering, Platform, and DevOps teams on implementing secure AI&nbsp;practices, and collaborate with Risk and Compliance on AI security requirements and controls.</li> </ul> <p class="p1"><strong>Qualifications</strong></p> <ul> <li class="p2">6–8 years of experience in security engineering, security architecture, or application/cloud security,&nbsp;with demonstrated hands-on experience securing AI, ML, or GenAI systems.</li> <li class="p2">Strong knowledge of LLM and agentic system risks and mitigations (e.g., prompt injection, data and&nbsp;model poisoning, excessive agency, model supply chain) and of securing MLOps pipelines,&nbsp;familiarity with technical AI security frameworks such as the OWASP Top 10 for LLM Applications&nbsp;and MITRE ATLAS, and general working knowledge of AI risk management frameworks (e.g., NISTAI RMF, ISO 42001).</li> <li class="p2">Experience working in cloud-native environments and securing cloud-hosted AI/ML platforms, with AWS strongly preferred (e.g., Amazon Bedrock, Amazon SageMaker).</li> <li class="p2">Practical experience with AI developer tools (e.g., Claude, Copilot, GitHub Copilot), MCP integrations, and agentic AI architectures, including securing them, building them, or both.</li> <li class="p2">Proficiency in coding to build and maintain security automation, tooling, and integrations, with hands-on experience in Python and other scripting languages.</li> <li class="p2">Track record of building security standards or programs from the ground up and driving adoption across engineering teams.</li> <li class="p2">Relevant hands-on certifications are a plus, particularly AWS cloud and cloud security certifications, as well as AI security certifications from bodies such as GIAC, Practical DevSecOps, or Offensive Security.</li> <li class="p2">Commitment to staying at the forefront of AI security trends and emerging threats, with strong communication skills and the ability to influence stakeholders and drive initiatives to completion.</li> </ul> <p class="p2">We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office 4 days a week with the flexibility to work remotely 1 day ( Friday).</p> <h3><strong>Benefits</strong></h3> <p>iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).</p> <p>For additional information on iCapital Network, please visit <a href="https://www.icapitalnetwork.com/about-us">https://www.icapitalnetwork.com/about-us</a>&nbsp; Twitter: @icapitalnetwork | LinkedIn: <a href="https://www.linkedin.com/company/icapital-network-inc">https://www.linkedin.com/company/icapital-network-inc</a></p>