G

Global Career Website

Delivers end-to-end digital commerce solutions

AI Security & Governance Engineer

Security Engineering & Architecture +1Updated on Nov 13
Full-timeKyiv, UkraineNo salary listed

About the Job

Requirements

  • At least 4 years of experience in information security, including application, cloud, infrastructure, or security engineering, with hands-on public cloud experience.
  • Practical cloud environment experience and a deep understanding of large language model architectures, including retrieval-augmented generation, agentic patterns, and tool calling.
  • Working knowledge of the OWASP Top 10 for LLM Applications and Salesforce AI security, including Agentforce, Einstein Trust Layer, Connected Apps, and Data Cloud.
  • Experience with GCP and Vertex AI, Anthropic ecosystems including Claude Enterprise, Claude Code, and MCP, adversarial testing tools including garak, PyRIT, and promptfoo, MITRE ATLAS, the EU AI Act, and client-facing consulting or agency models.
  • Ability to explain complex technical risks clearly to non-technical audiences, leadership, and clients.

Responsibilities

  • Own security and AI engineering end-to-end, turning existing practices into a managed function, mitigating platform risks, and positioning AI security as a core asset in enterprise client conversations.
  • Threat-model RAG and agentic workflows, including indirect prompt injection, trust boundaries, and client context isolation; implement data-leakage guardrails and review AI features before production.
  • Govern MCP tool permissions and review connected app configurations and OAuth scopes for internal and client Salesforce organizations.
  • Define AI service logging, detections, and alerting with the platform team, and manage external red teaming for each engagement to strengthen guardrail baselines.
  • Conduct fast-turnaround security reviews of client solutions on Salesforce, including Agentforce, Data Cloud, and MCP connectors, and on Anthropic products including Claude API, Claude Enterprise, Claude Code, and Claudeforce plugins.
  • Own standard client data-handling answers covering retention, residency, and model routing; maintain deployment inventories; and support pre-sales and security questionnaires.
  • Own internal AI policies covering access tiers, acceptable use, and exceptions with Legal and HR; map controls to NIST AI RMF, ISO 42001, and SOC 2; and review vendor due diligence and AI contract and DPA clauses.
  • Manage access, spend limits, and BYOK/SDK surfaces across AI development tools; detect shadow AI and guide engineers on safe AI usage.

About the Company

Global Career Website

Delivers end-to-end digital commerce solutions

Astound Commerce functions as a digital commerce agency that helps brands and retailers grow online sales. It provides end-to-end services, from digital commerce strategy and technology selection to the design, implementation, and ongoing optimization of online stores. The company builds e-commerce sites, integrates back-end systems, and ensures a smooth customer journey from browsing to checkout, along with digital marketing, customer experience design, and data analytics. Revenue comes from project fees for platform development and ongoing retainer fees for support and optimization. It partners with major technology providers such as Salesforce, Adobe (Magento), and BigCommerce to deliver tailored solutions, and operates globally with offices across North America, Europe, and Asia. Its goal is to help global brands maximize online revenue and strengthen customer engagement across digital channels by delivering scalable, integrated e-commerce experiences.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Atlanta, GA
Founded
2000

Recently Posted Jobs

Explore more opportunities at Global Career Website

See more jobs