AI Security Engineer

Responsibilities

• Secure AI-enabled products and agent workflows using third-party models
• Assess customer data sent to third-party model vendors, focusing on minimization, retention, and logging
• Design controls for AI agent permissions and system access using least privilege
• Implement tenant and user data isolation across prompts, conversation history, and retrieval
• Threat model and test for prompt injection and indirect injection via untrusted inputs
• Partner with Product and Engineering on safe document ingestion and output validation
• Support SC TRM and BNM RMiT for AI technology risks and third-party oversight
• Build security tests, monitoring, and response procedures for AI misuse and data exposure

Requirements

• Degree in Computer Science, Cybersecurity, AI, or related field, or equivalent experience
• 3+ years in application security, product security, security engineering, or AI system security
• Experience implementing SC TRM and BNM RMiT controls or regulatory control evidence
• Understanding of third-party LLM integrations, model APIs, agent tools, and RAG architectures
• Knowledge of prompt injection, cross-user data leakage, and vendor data disclosure risks
• Programming skills in Python and TypeScript/Node.js, plus experience with APIs and AWS or GCP
• Ability to collaborate with Product, Legal, Compliance, and Engineering teams

About the Company

BJAK is a leading insurance platform in Southeast Asia, expanding into spending, saving, investing, and traveling to help people get more from their money every day.