AI Security Engineer

Your Journey at Crowe Starts Here:

At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you're trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That's why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.

Job Description:

About Crowe AI Transformation

Everything we do is about making the future of human work more purposeful. We do this by leveraging state-of-the-art technologies, modern architecture, and industry experts to create AI-powered solutions that transform the way our clients do business.

The new AI Transformation team will build on Crowe's established AI foundation, furthering the capabilities of our Applied AI / Machine Learning team. By combining Generative AI, Machine Learning and Software Engineering, this team empowers Crowe clients to transform their business models through AI, irrespective of their current AI adoption stage.

As a member of AI Transformation, you will help distinguish Crowe in the market and drive the firm's technology and innovation strategy. The future is powered by AI, come build it with us.

About the Team

• We invest in expertise. You'll have the time, space, and support to go deep in your projects and build lasting technical and strategic mastery. You'll work with developers, product stakeholders, and project managers as a trusted leader and domain expert.

• We believe in continuous growth. Our team is committed to professional development and knowledge-sharing.

• We protect balance. Our distributed team culture is grounded in trust and flexibility. We offer unlimited PTO, a flexible remote work policy, and a supportive environment that prioritizes sustainable, long-term performance.

About the Role

The AI Security Engineer I (Senior Staff) serves as a senior technical expert responsible for securing enterprise AI and machine learning systems across their full lifecycle, including data ingestion, model training, inference pipelines, retrieval-augmented generation (RAG) systems, and generative AI applications. This role leads advanced security assessments, identifies vulnerabilities unique to AI-enabled platforms, and architects secure-by-design solutions for cloud and hybrid environments.

Working closely with cybersecurity, cloud engineering, MLOps, data engineering, and AI engineering teams, the engineer designs and implements security controls that protect sensitive data, model artifacts, embeddings, and inference services from emerging threats. As a senior staff-level contributor, this role influences architectural security decisions, advances AI-specific threat detection and mitigation strategies, mentors' engineers, and strengthens the organization's overall AI security and responsible AI posture.

• Architecting secure deployment and operating models for AI, ML, and generative AI systems across cloud and hybrid environments.

• Conducting advanced AI security testing, including adversarial ML attacks, prompt injection simulations, and RAG manipulation assessments.

• Identifying and mitigating vulnerabilities in model-serving infrastructure, feature stores, embedding pipelines, and vector databases.

• Designing guardrails, safety filters, access controls, and secure interaction patterns for LLM- and RAG-based applications.

• Developing automated tooling to detect misconfigurations, insecure endpoints, and data exposure risks within AI pipelines.

• Collaborating with cloud and DevOps teams to secure Kubernetes clusters, GPU workloads, and infrastructure-as-code deployments.

• Analyzing logs, telemetry, and model outputs to detect anomalies, abuse patterns, model degradation, or malicious activity.

• Implementing encryption, secrets management, IAM policies, and network segmentation for AI workloads.

• Leading secure design and architecture reviews for AI features, APIs, and platform components.

• Documenting threat models, attack surfaces, risk assessments, mitigations, and compliance artifacts.

• Participating in AI-specific incident response, investigation, and post-incident analysis.

• Evaluating emerging AI security technologies, including model fingerprinting, inference protection, and secure execution environments.

• Supporting enterprise adoption of responsible AI, data protection, and regulatory compliance standards.

• Mentoring junior engineers, ML engineers, and security practitioners on AI security best practices.

• Contributing to cloud security posture management capabilities for AI-enabled platforms.

Qualifications

• 4+ years of experience in cybersecurity, cloud security, ML engineering, or DevSecOps roles.

• Demonstrated experience securing AI/ML or generative AI systems in production environments.

• Strong understanding of ML pipelines, model architectures, and AI system components.

• Deep knowledge of adversarial ML attack vectors and mitigation techniques.

• Proficiency in Python, security testing tools, and cloud security frameworks.

• Ability to assess risk across distributed services, storage systems, inference APIs, and data pipelines.

• Strong communication skills and sound technical judgment in security decision-making.

• Hands-on experience with Microsoft Azure and M365 security environments.

• Willingness to travel occasionally for cross-functional planning and collaboration.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical field, or equivalent experience.

• Master's degree or advanced training in cybersecurity, AI, or related discipline.

• Security and cloud certifications such as SC-100, SC-900, SC-200, SC-300, AZ-500, AI-102, or equivalent AWS certifications.

• CISSP, CKS, or CompTIA Cloud certifications.

• Advanced experience securing AI platforms on Azure, including Kubernetes security (RBAC, network policies) and multi-tenant GPU workloads.

• Experience securing container pipelines using image scanning, signing, and policy enforcement.

• Expertise with secrets management solutions (e.g., Azure Key Vault, HashiCorp Vault).

• Experience implementing zero-trust architecture and securing CI/CD pipelines for AI systems.

• Deep knowledge of generative AI and RAG security, including prevention of prompt injections, jailbreaks, context poisoning, and embedding leakage.

• Experience designing safe-output rendering patterns, guardrails, and red-teaming processes for generative systems.

• Familiarity with emerging generative AI defense techniques such as model watermarking, inference integrity checks, and output validation frameworks.

We expect the candidate to uphold Crowe's values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Crowe is not sponsoring for work authorization at this time.

Our Benefits:
Your exceptional people experience starts here. At Crowe, we know that great peopleare what makes a great firm. We care about our people and offer employees a comprehensive total rewards package. Learn more about what working at Crowe can mean for you!

How You Can Grow:
We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper!

More about Crowe:
Crowe (www.crowe.com) is one of the largest public accounting, consulting and technology firms in the United States. Crowe uses its deep industry expertise to provide audit services to public and private entities while also helping clients reach their goals with tax, advisory, risk and performance services. Crowe is recognized by many organizations as one of the country's best places to work. Crowe serves clients worldwide as an independent member of Crowe Global, one of the largest global accounting networks in the world. The network consists of more than 200 independent accounting and advisory services firms in more than 130 countries around the world.

Crowe LLP provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws.

Crowe LLP does not accept unsolicited candidates, referrals or resumes from any staffing agency, recruiting service, sourcing entity or any other third-party paid service at any time. Any referrals, resumes or candidates submitted to Crowe, or any employee or owner of Crowe without a pre-existing agreement signed by both parties covering the submission will be considered the property of Crowe, and free of charge.

Please visit our webpage to see notices of the various state and local Ban-the-Box laws and Fair Chance Ordinances, where applicable.