Senior AI Information Security Engineer
The Senior AI Information Security Engineer will lead the design, development, and deployment of agentic AI systems and secure AI capabilities across the enterprise. Reporting to the Global CISO, this role owns hands-on development of AI agents, automation pipelines, and LLM-based workflows while ensuring they meet security, compliance, and governance requirements.
The engineer will partner with Information Security, Legal, Compliance, Privacy, IT, and Engineering to take AI use cases from concept to production.
Key responsibilities include establishing guardrails, safety patterns, and evaluation frameworks for agentic systems, performing security reviews and threat modeling for LLM integrations, and identifying and mitigating AI-specific risks.
- Design, build, and own production-grade agentic AI systems - including multi-step agents, tool-using LLM pipelines, retrieval-augmented generation (RAG) workflows, and automated decision-making systems.
- Develop and maintain the company’s internal agentic AI platform, including agent orchestration, memory management, tool integrations, and human-in-the-loop review workflows.
- Identify high-value agentic use cases across business functions and deliver working solutions end-to-end, from requirements through deployment and monitoring.
- Establish guardrails, safety patterns, and evaluation frameworks for agentic systems, including output validation, escalation logic, and auditability.
- Implement and maintain security controls for AI tools and workflows: data handling, access controls, logging, monitoring, prompt injection mitigations, and acceptable-use enforcement.
- Perform security reviews and threat modeling for LLM integrations, agentic workflows, APIs, and third-party AI/SaaS solutions.
- Identify and mitigate AI-specific risks: sensitive data exposure, over-permissioned agents, insecure tool use, supply-chain exposure, and inadequate human oversight.
- Support AI governance and compliance activities with technical guidance, architecture input, and implementation evidence.
- Develop scripts, integrations, and lightweight applications using Python, PowerShell, REST APIs, and workflow automation platforms.
- Build and maintain SIEM detections, SOAR playbooks, dashboards, and reporting capabilities, including telemetry for AI-enabled workflows.
- Engineer security improvements across identity, cloud, SaaS, endpoint, and data protection domains.
- Respond to security incidents involving AI tools, data exposure, and automation failures.
- Translate business and control objectives into secure AI designs, prototypes, and production capabilities.
- Manage and communicate project status, risk decisions, and implementation progress to stakeholders.
- Maintain standard operating documentation for knowledge transfer, audit readiness, and disaster recovery.
- Agentic AI development: agent frameworks (e.g., LangChain, AutoGen, CrewAI), LLM APIs, tool use, RAG, vector databases, prompt engineering, and safety guardrails (required).
- Python development, REST APIs, and workflow automation; scripting in PowerShell or similar (required).
- Security architecture across identity, cloud, SaaS, endpoint, network, application, and data protection (required).
- SIEM management, log onboarding, detection engineering, and alert tuning (required).
- SOAR platforms, ticketing integrations, and automated playbook development (required).
- Cloud and SaaS security: identity providers, CASB/SSE, DLP, key/secrets management (preferred).
- Application and API security, vulnerability scanning, DevSecOps, and secure SDLC (preferred).
- AI security and governance: NIST AI RMF, OWASP LLM Top 10, model risk, auditability, and policy enforcement (preferred).
- SIEM/SOAR platforms, endpoint security, web application firewalls, and threat intelligence tooling (preferred).
- ISO 27001, NIST CSF, privacy frameworks, and common risk management terminology (preferred).
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Data Science, or equivalent experience (required).
- 5+ years in cybersecurity, security engineering, application security, or a related field (required).
- 3+ years in security operations, security engineering, DevSecOps, or cloud security (required).
- 2+ years of hands-on AI/ML development, agentic systems, automation, or data engineering (required).
- Demonstrated ability to deliver cross-functional technical projects end-to-end (required).
- CISSP, CISM, or CISA (preferred).
- SANS GIAC (cloud, incident response, application security, or automation focus) (preferred).
- Cloud security certifications (CCSK, CCSP, or major cloud provider) (preferred).
- AI governance, ML security, or secure software development coursework or certification (preferred).
- The targeted pay range for this role is $170,000-$180,000.
- The total compensation package for this position may also include applicable incentive compensation, such as an annual performance bonus.
Light & Wonder, Inc. is a leading cross-platform gaming company headquartered in Las Vegas, Nevada. Formerly known as Scientific Games, it rebranded in 2022 after divesting its lottery and sports-betting businesses to focus on gaming. The company operates across three segments - Gaming (slot machines, table games and casino systems under brands such as Bally, WMS and Shuffle Master), SciPlay (social casino games) and iGaming (online casino content). Listed in both the US and Australia, it supplies content and systems to casinos and online operators worldwide.