Staff Security Engineer - AI Enablement
The Staff AI Enablement Security Engineer will be one of two senior security individual contributors specifically aligned to Trustly's AI transformation. This role focuses on securing Claude, MCP implementations, and the broader agentic AI tooling that Trustly is deploying internally and within its products.
The engineer will define the security standards and controls for AI systems. They will work hands-on with the AI Enablement team to assess and mitigate risk, and build the tooling and frameworks that allow Trustly to move fast with AI without compromising security.
- Own security assessment and risk management for Trustly's AI and LLM systems - including Claude, MCP server implementations, agentic workflows, and AI-assisted developer tooling.
- Define and implement security controls, access governance, and monitoring frameworks for AI systems - covering prompt injection, data leakage, model misuse, and agentic system abuse scenarios.
- Partner closely with the AI Enablement team to embed security from the start of AI feature development - conducting threat modeling, reviewing architectures, and advising on safe deployment patterns.
- Build and maintain tooling for AI-specific security monitoring - detecting anomalous model behavior, unauthorized data access, and policy violations in real time.
- Develop and maintain AI security standards, guidelines, and training resources for engineering teams across Trustly - making it easy for engineers to build with AI safely.
- Stay at the leading edge of AI security research - tracking emerging attack vectors, defensive techniques, and regulatory developments relevant to LLM and agentic system security.
- 8+ years of security engineering experience, with at least 2-3 years focused on AI/ML security, LLM security, or security for data-intensive systems (required).
- Deep, hands-on understanding of the AI security threat landscape - prompt injection, jailbreaking, data poisoning, model exfiltration, insecure agentic tool use, and MCP-specific attack surfaces (required).
- Strong security engineering fundamentals - experienced in threat modeling, secure design review, penetration testing, and building security monitoring infrastructure (required).
- Familiarity with MCP (Model Context Protocol) architecture, LLM orchestration frameworks, and agentic AI deployment patterns - you can reason about security at the level of individual tool calls and context windows (required).
- Track record of operating at Staff+ IC scope - driving security decisions that span multiple teams, influencing architecture through technical credibility rather than authority (required).
- Excellent communicator - able to explain novel AI security risks clearly to both technical and non-technical audiences, and to earn trust with engineering teams as a partner rather than a gatekeeper (required).
- Flexible paid time off & generous PTO accrual plans.
- Comprehensive medical, dental, vision, and other insurances.
- FSA & HSA plans for medical and dependent care.
- Home office set-up allowance.
- Internet stipend.
- Retirement plan match for 401k and RRSP.
- Gender-neutral paid parental leave.
Trustly is a Swedish fintech company specialising in account-to-account (open banking) payments, letting consumers pay directly from their bank accounts without cards. Founded in 2008 and headquartered in Stockholm, it connects merchants - including many online gambling operators - to thousands of banks across Europe and North America. The company processes billions of euros in payments annually and is a widely used deposit and withdrawal method in the iGaming industry. Trustly employs more than 1,000 people across offices in Europe and the Americas.
