SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 174,250 - 205,000 / annual
Jasper is seeking a Senior Security Engineer to be the first generalist on its Security Engineering team. This is a hands-on role spanning AI security, infrastructure hardening, product security, and compliance engineering—reporting to the Director of Security.
You will lead security design and implementation for Jasper's AI infrastructure and AI-powered internal workflows, establishing guardrails for how AI systems access, process, and handle sensitive data. You'll own threat modeling for AI-specific risks (prompt injection, data leakage, model abuse, insecure tool use) and design controls for validating, logging, and auditing AI outputs where accuracy and data protection are critical.
Key responsibilities include: building security tooling and automated checks to enable safe AI adoption; collaborating on the overall Security program direction; partnering with GRC to automate evidence collection, control monitoring, and compliance workflows (e.g., via Vanta); strengthening infrastructure security across GCP and AWS (IAM, network segmentation, secrets management); owning GitHub security controls (branch protection, secret scanning, CI/CD pipeline security); operating and tuning CSPM/CNAPP tooling like Wiz; and using AI tools heavily in your own workflow while helping the broader org do the same safely.
You bring 8+ years of security engineering experience with hands-on work across at least two of: AI/ML security, cloud infrastructure security, or GRC compliance engineering. You have practical experience securing AI systems (LLM applications, agents, ML pipelines) and deep understanding of security principles and common vulnerabilities. You're proactive, able to identify and address security gaps through automation and tooling, and comfortable building security programs from scratch. You have strong working knowledge of GCP and AWS, experience with GitHub security controls and secure software supply chain practices, hands-on experience with Wiz or comparable CSPM/CNAPP platforms, and comfort building automation (scripting, APIs, infrastructure-as-code). You're a strong cross-functional collaborator who can communicate security and compliance tradeoffs clearly to both technical and non-technical stakeholders. Preferred qualifications include direct experience building or securing AI agent frameworks, SOC 2 / ISO 27001 compliance experience, detection engineering background, experience as an early hire on a small security team, and familiarity with AI infrastructure platforms.
