AI Security Engineer

OverviewYour Future. Secured. ISC2 is a force for good. As the world’s leading nonprofit member organization for cybersecurity professionals, our core values — Integrity, Advocacy, Commitment, Inclusion, and Excellence — drive everything we do in support of our vision of a safe and secure cyber world. Our globally recognized, award-winning portfolio of certifications provide an independent and globally recognized endorsement of cybersecurity knowledge, skills and experience for all career levels. Our charitable arm, the Center for Cyber Safety and Education, enables ISC2 and our members to serve the public by educating the most vulnerable about cyber risks and empowering access to enter and thrive in the cyber profession. Learn more at ISC2 online and connect with us on Twitter, Facebook and LinkedIn. When you join ISC2, you’ll demonstrate your commitment to an inclusive and equitable environment. Your support of the unique perspectives and experiences shared by our global cybersecurity workforce and profession will be recognized. We invite you to take an active role in helping us create a true sense of belonging across our organization — an environment of authenticity, trust, empowerment and connectedness that empowers all of our successes. Learn more.Position SummaryThe AI Security Engineer is responsible for identifying, assessing, and mitigating security risks introduced by artificial intelligence and machine learning systems across ISC2’s technology estate. This role sits at the intersection of offensive security, application security, and data science — evaluating AI/ML pipelines, large language model (LLM) integrations, and AI-powered products for adversarial threats, model vulnerabilities, and supply chain risks. The AI Security Engineer partners closely with the Security and Technical Operations team, engineering, and product stakeholders to embed security controls throughout the AI development lifecycle and contributes directly to ISC2’s ISO/IEC 27001:2022 ISMS program and broader cybersecurity governance objectives. ResponsibilitiesPerform security assessments of AI/ML systems, including threat modeling, adversarial testing, and of LLM-based applications and AI-powered products and services integrated into ISC2’s products and operations. Evaluate AI/ML implementations for vulnerabilities including prompt injection, jailbreaking, model inversion, data poisoning, membership inference, and adversarial example attacks. Define and implement secure AI development lifecycle (AI-SDLC) standards, including secure model training, data governance, agent, and other access controls, and model deployment guardrails. Conduct third-party AI vendor and model supply chain risk assessments; evaluate API-based AI services (e.g., OpenAI, Anthropic,Claude Code, Azure OpenAI) for data handling, privacy, and security posture. Partner with engineering and product teams to review AI feature designs, conduct pre-deployment security reviews, and provide risk acceptance recommendations for AI-related SSDLC exceptions. Monitor the evolving AI threat landscape;maintain awareness of emerging attack techniques, regulatory developments (EU AI Act, NIST AI RMF), and industry best practices (OWASP Top 10 for LLMs, MITRE ATLAS). Support ISC2’s ISO/IEC 27001:2022 ISMS by mapping AI risk controls to applicable Annex A requirements (including A.8.25 through A.8.29) and contributing AI-specific risk treatment plans to the organizational risk register. Develop and deliver internal training and awareness content on responsible AI use, AI-specific threats, and secure integration patterns for developers and business stakeholders. Contribute to ISC2’s thought leadership in AI security by supporting content, certification, and research initiatives aligned with the organization’s mission.Perform miscellaneous duties as assigned.Behavioral CompetenciesIntellectual Curiosity: Thrives in an ambiguous, rapidly evolving domain; proactively explores emerging AI capabilities and their security implications. Integrity & Responsibility: Approaches AI security with a strong ethical foundation, particularly around bias, fairness, privacy, and dual-use risks of AI systems. Cross-Functional Influence: Able to translate complex AI risk concepts for diverse audiences including engineers, executives, auditors, and non-technical business stakeholders. Adaptability: Comfortable operating without established playbooks; exercises sound judgment when standards, regulations, and tooling are still maturing. Mission Alignment:Demonstrates genuine commitment to ISC2’s mission of supporting a safe and secure cyber world; brings professionalism and advocacy to the AI security discipline. Qualifications Familiarity with AI/ML frameworks (PyTorch, TensorFlow) and cloud-based AI services (Azure OpenAI, AWS Bedrock, Google Vertex AI). Working knowledge of AI governance frameworks: NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, and the EU AI Act risk categ