Principal AI Security Engineer

Team: Information Technology

Location: US-MA-Natick

Salary Range: USD 231,300 - 144,600

Job Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

The Principal AI Security Engineer will serve as an enterprise subject-matter expert for securing AI platforms, agents, integrations, data sources, and supporting infrastructure. This role identifies AI-specific threats, translates risk and governance requirements into practical technical safeguards, and helps teams securely adopt emerging AI capabilities.

The role combines security engineering, architecture review and d esig n , threat modeling, monitoring, and cross-functional collaboration to establish a consistent enterprise approach to secure AI adoption .

MathWorks is on a hybrid schedule (3 days at the Natick, MA Headquarters, 2 days’ work from home)

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

• Serve as the enterprise security expert for AI platforms, agents, integrations, APIs, and emerging AI use cases.
• Assess AI-related risks, including prompt injection, data exposure, insecure tool invocation, excessive agency, and adversarial inputs.
• Design, implement, and validate security controls for AI platforms, including data protection, access controls, monitoring, guardrails, and approved data-use patterns.
• Conduct security architecture reviews, threat modeling, control assessments, and risk-based evaluations of AI solutions and third-party services.
• Translate policies, governance requirements, and control frameworks into practical technical requirements, implementation plans, and operational processes.
• Develop monitoring, logging, detection, and investigation capabilities for AI activity and integrate relevant telemetry into security operations.
• Partner with Security Operations and incident response teams to improve AI-related detection, investigation, and response processes.
• Collaborate across technical and governance teams to incorporate security requirements into AI platforms, services, and workflows.
• Develop reusable security patterns, implementation guidance, metrics, and evidence to support engineering, governance, risk, and audit activities.
• Monitor changes in AI technologies, threats, and industry guidance, and evolve the organization's security approach accordingly.

Minimum Qualifications

• A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.
• Visa sponsorship will not be provided for this position.
• Candidates for this position must be authorized to work in the United States on a full-time basis for any employer without restriction.

Additional Qualifications

• Experience in security engineering, cloud security, data security, application security, detection engineering, or related technical security discipline.
• Experience implementing, operating, or validating security controls such as data protection, DLP, SIEM, cloud security, API security, endpoint security, or application security.
• Experience performing security assessments, architecture reviews, threat modeling, or other risk-based security evaluations.
• Experience translating security risks and governance requirements into practical technical safeguards and implementation plans.
• Strong understanding of data protection principles, including sensitive data discovery, classification, encryption, privacy, and secure data handling.
• Strong analytical, communication, and collaboration skills, with the ability to align technical and nontechnical stakeholders on practical solutions.
• Experience securing AI platforms, AI agents, machine learning systems, or other emerging technologies preferred.
• Knowledge of AI-specific threats such as prompt injection, model misuse, sensitive data exposure, adversarial inputs, and insecure tool invocation preferred.
• Familiarity with AI architectures, APIs, Model Context Protocol services, retrieval-augmented generation, guardrails, and human-in-the-loop controls preferred.
• Experience automating security processes through scripting, APIs, infrastructure as code, or similar approaches preferred.
• Familiarity with NIST AI RMF, NIST Cybersecurity Framework, ISO/IEC 27001, ISO/IEC 42001, or OWASP guidance for AI applications preferred.
• Experience developing reusable security patterns that enable emerging technology adoption while effectively managing risk preferred.
• Relevant AI security or governance certifications, such as ISACA Advanced in AI Security Management (AAISM), IAPP Artificial Intelligence Governance Professional