Sr. Staff AI Security Engineer

Bill.com is seeking a Sr. Staff AI Security Engineer to lead the secure deployment and ongoing operation of AI and ML systems. This role emphasizes protecting LLMs and orchestration layers through secure gateway design, structured red-teaming, and a risk roadmap grounded in the OWASP LLM Top 10.

Location

• Draper, UT (remote)

Compensation

• USD 165,200 - 206,600 per year (Draper, UT)
• USD 194,300 - 243,000 per year (San Jose pay range)

Role Summary

This position focuses on securing LLMs and the orchestration layer around them. The work includes implementing secure gateways, leading adversarial testing, and driving an OWASP LLM Top 10–based security roadmap.

Responsibilities

• Design, build, and operate secure AI gateways and policy orchestration layers across multiple AI models and service providers
• Configure end point settings for AI tools in collaboration with IT end point management solutions
• Stand up and lead a formal AI red-teaming practice addressing prompt injection, jailbreaking, model extraction, and emerging attack vectors
• Identify and mitigate AI-specific threats, including input manipulation, supply chain risks (model weights, datasets, third-party AI libraries), data privacy (training data leakage and PII disclosure), and model integrity (poisoning and unauthorized fine-tuning)
• Automate security checks and guardrails to support faster development cycles without weakening the security posture
• Apply and operationalize the OWASP LLM Top 10 framework to categorize and mitigate risk
• Own the AI security roadmap and advise senior leadership on AI risks and safe adoption
• Partner with platform teams to strengthen a collaborative security culture
• Mentor fellow engineers on AI security best practices
• Document and report vulnerabilities with clear remediation guidance and technical direction

Required Qualifications

• A proven track record building and scaling security systems in high-growth environments
• High proficiency in Python or Go to build, automate, and scale security tooling
• Deep understanding of LLM-specific attack vectors, including prompt injection and jailbreaking
• Deep understanding and applied experience with the OWASP LLM Top 10 framework
• Experience designing secure API gateways, orchestration layers, and scalable security infrastructure using infrastructure as code
• Experience standing up red-teaming or adversarial testing programs
• Strong grasp of AI/ML fundamentals, including model supply chain and data privacy risks
• Builder mentality and interest in enabling development through secure architecture rather than blocking it
• Ability to influence senior leadership and mentor engineers across the organization
• Background in Computer Science, Cybersecurity, or a related technical field

Technologies

• Python
• Go
• OWASP LLM Top 10
• Infrastructure as code
• AI/ML
• LLMs

Benefits

• 100% paid employee health, dental, and vision plans (HMO, PPO, or HDHP)
• HSA & FSA accounts
• Life Insurance, Long & Short-term disability coverage
• Employee Assistance Program (EAP)
• 11+ Observed holidays and wellness days and flexible time off
• Employee Stock Purchase Program with employee discounts
• Wellness & Fitness initiatives
• Employee recognition and referral programs
• Medical, dental, vision, life and disability insurance
• 401(k) retirement plan
• Flexible spending & health savings account
• Paid holidays
• Paid time off
• Other company benefits

Visa Sponsorship

Please note that this position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.