Principal AI Security Engineer

Hybrid role in Natick, MA with a strong focus on practical, enterprise-grade AI security. As the Principal AI Security Engineer at MathWorks, you will serve as an AI security subject-matter expert, helping secure AI platforms, agents, integrations, APIs, data sources, and the infrastructure that supports them. The work connects governance and risk requirements to scalable technical safeguards and reusable security patterns across the enterprise.

Compensation: USD 231,300 per year. Experience: 10+ years. Education: bachelor’s degree.

What you’ll do

• Act as the enterprise security expert for AI platforms, agents, integrations, APIs, and emerging AI use cases.
• Assess AI-related risks, including prompt injection, data exposure, insecure tool invocation, excessive agency, and adversarial inputs.
• Design, implement, and validate security controls for AI platforms, including data protection, access controls, monitoring, guardrails, and approved data-use patterns.
• Lead security architecture reviews, threat modeling, control assessments, and risk-based evaluations for AI solutions and third-party services.
• Translate policies, governance requirements, and control frameworks into practical technical requirements, implementation plans, and operational processes.
• Build monitoring, logging, detection, and investigation capabilities for AI activity, and integrate relevant telemetry into Security Operations.
• Partner with Security Operations and incident response teams to improve AI-related detection, investigation, and response processes.
• Collaborate across technical and governance teams to incorporate security requirements into AI platforms, services, and workflows.
• Develop reusable security patterns, implementation guidance, metrics, and evidence to support engineering, governance, risk, and audit activities.
• Track changes in AI technologies, threats, and industry guidance, and evolve the organization’s security approach accordingly.

What you bring

• Experience in security engineering, cloud security, data security, application security, detection engineering, or a related technical security discipline.
• Experience implementing, operating, or validating security controls such as data protection, DLP, SIEM, cloud security, API security, endpoint security, or application security.
• Experience conducting security assessments, architecture reviews, threat modeling, or other risk-based security evaluations.
• Ability to translate security risks and governance requirements into practical technical safeguards and implementation plans.
• Strong understanding of data protection principles, including sensitive data discovery, classification, encryption, privacy, and secure data handling.
• Strong analytical, communication, and collaboration skills to align technical and nontechnical stakeholders on practical solutions.
• Experience securing AI platforms, AI agents, machine learning systems, or other emerging technologies is preferred.
• Knowledge of AI-specific threats such as prompt injection, model misuse, sensitive data exposure, adversarial inputs, and insecure tool invocation is preferred.
• Familiarity with AI architectures and services including APIs, Model Context Protocol services, retrieval-augmented generation, guardrails, and human-in-the-loop controls is preferred.
• Experience automating security processes through scripting, APIs, infrastructure as code, or similar approaches is preferred.
• Familiarity with NIST AI RMF, NIST Cybersecurity Framework, ISO/IEC 27001, ISO/IEC 42001, or OWASP guidance for AI applications is preferred.
• Experience developing reusable security patterns that enable emerging technology adoption while managing risk is preferred.

Technologies you may work with

• prompt injection
• DLP
• SIEM
• API security
• endpoint security
• Model Context Protocol services
• retrieval-augmented generation
• guardrails
• human-in-the-loop controls
• NIST AI RMF
• NIST Cybersecurity Framework
• ISO/IEC 27001
• ISO/IEC 42001
• OWASP

Location and schedule

Hybrid schedule: 3 days at the Natick, MA headquarters and 2 days work from home.