Sr. AI Security Engineer

About The Role

Backblaze is seeking a Senior AI Security Engineer to design and implement safeguards for internal AI usage, with a focus on agentic systems, developer protection, and runtime security.

This is a hands-on role for a practitioner who has built and deployed security controls, not just defined policy. You will enable teams to safely use AI by creating enforcement layers, identity controls, and detection capabilities that constrain and monitor AI-driven activity.

What You’ll Do:

Agentic AI Safeguards

• Architect and implement guardrails for tool-using AI systems, including:
• Tool access controls and allowlists
• Context and memory isolation
• Step-level validation of agent actions
• Apply mitigations aligned to the OWASP Agentic AI Top 10 (e.g., prompt injection, unsafe tool use, data leakage, excessive autonomy)

Runtime Security Controls

• Build enforcement mechanisms that govern AI behavior at execution time:
• Interceptors, proxies, or middleware for tool/API calls
• Policy decision and enforcement layers
• Rate limits, execution bounds, and kill-switches
• Prevent unsafe or unauthorized actions initiated by AI systems

Non-Human Identity (NHI)

• Design and implement identity and access controls for agents and automation, including:
• Short-lived credentials and scoped permissions
• Clear separation between human and non-human access
• Strong binding of identity to task context and execution
• Ensure all AI actions are attributable and auditable

Observability & Detection

• Implement logging and tracing for AI activity:
• Prompts, tool usage, and decision flows
• Build detection capabilities using:
• Behavioral baselining and anomaly detection techniques
• Identify and alert on:
• Abnormal tool usage
• Suspicious prompt patterns
• Unexpected data access

Threat Modeling (MAESTRO)

• Perform agentic system threat modeling using MAESTRO, including:
• Mapping agent capabilities, trust boundaries, and attack paths
• Modeling misuse and adversarial scenarios
• Translate findings into practical safeguards and detection logic

Developer Safeguards

• Protect developers using AI tools by:
• Preventing sensitive data exposure
• Validating AI-generated code for security vulnerabilities
• Enforcing policies on AI-assisted development workflows