Information Security AI Engineer

Information Security AI Engineer
Remote (EST)- Client located in Albany, NY
40 hours/week
1 year (opportunity for extension)
Hourly rate 75.00

Department: Information Security Office
Initiative: AI (Artificial Intelligence)
Cloud first initiatives and new IT projects including O365, Egnyte, and AI result in a resource gap to meet company policy.
IT Systems That Will Be Used: Microsoft Suite
Required: Microsoft Suite - Office 360, Azure, Copilot 

Must understand the Microsoft platforms and how AI tools (Copilot and other internal tools) can work with those technologies.



Mandatory Qualifications:

• 8-10 years of relevant experience.
• Understanding in application integration patterns and API‑based access control. 
• Proven knowledge of security certifications (e.g., CISSP, CISA, CISM, GPEN, GWAPT, GCIH, GIAC certifications, OSCP, CEH, Security+). Understanding of role‑based access control.
• Associates degree in cyber security, information assurance, or information technology.
• Minimum of 3 year of dedicated security experience or Bachelor’s degree and 1 years of experience.

• Align security monitoring and risk tracking with frameworks like the NIST AI Risk Management Framework and NYS ITS Acceptable Use of AI technology.
• Align security monitoring and risk tracking with frameworks like the NIST AI Risk Management Framework and NYS ITS Acceptable Use of AI technology.
• Protect against model misuse, prompt injection, model evasion, data poisoning, and unauthorized access.
• Integrate AI security tools with our SIEM and cloud platforms to detect and triage anomalies.
• Work with Data Governance, IT, and business teams to validate security controls for AI.
• Manage security operations tasks related to AI, identity and access management, including incident response recommended solutions. 
• Conduct regular audits and assessments to identify vulnerabilities and ensure compliance. 
• Assess current applications and architecture to ensure implementations align with security strategies, best practices, and approved standards. 
• Other duties as assigned that contribute to the key outcomes of the Information Security team.