SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
iCapital seeks an experienced AI Security Engineer at the Vice President / Assistant Vice President level to establish and lead the firm's AI Security Engineering practice. As the company's first dedicated AI security hire, you will define how iCapital adopts AI safely across software development, its platform, and emerging agentic systems, architecting standards, guardrails, and tooling from the ground up.
Key responsibilities include: defining and leading AI security strategy and secure-by-design standards in partnership with iCapital's AI team; establishing governance, monitoring, and controls for AI coding assistants and MCP integrations; conducting threat modeling and security design reviews of AI systems; designing and implementing AI guardrails including prompt injection defenses, output validation, and data protection embedded in CI/CD pipelines; defining security architecture for autonomous and semi-autonomous agents with least-privilege access and human-in-the-loop controls; architecting and assessing security of AI/ML workloads on AWS; building agentic AI workflows to strengthen Security Engineering and InfoSec operations; partnering with the SOC on AI-specific threat detection and response; and advising Engineering, Platform, DevOps, Risk, and Compliance teams on secure AI practices.
Required qualifications: 6–8 years in security engineering, security architecture, or application/cloud security with demonstrated hands-on experience securing AI, ML, or GenAI systems. Strong knowledge of LLM and agentic system risks (prompt injection, data/model poisoning, excessive agency, supply chain threats), MLOps pipeline security, and familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, and ISO 42001. Experience in cloud-native environments and securing cloud-hosted AI/ML platforms, with AWS expertise (Bedrock, SageMaker) strongly preferred. Practical experience with AI developer tools (Claude, Copilot, GitHub Copilot), MCP integrations, and agentic architectures. Proficiency in Python and other scripting languages for building security automation and tooling. Track record of building security standards or programs from the ground up and driving adoption. Relevant certifications (AWS, cloud security, AI security from GIAC, Practical DevSecOps, or Offensive Security) are a plus. Strong communication skills and ability to influence stakeholders.
The role is hybrid: 4 days in office, 1 day remote (Friday). iCapital offers competitive salary, annual performance bonus, equity for full-time employees, 100% employer-paid health and dental insurance, and generous PTO.
