Senior Product Security Engineer; AI​/ML

Senior Product Security Engineer (AI/ML)

British Columbia

Greenhouse is hiring to make every company great  will join a team that collaborates purposefully, fosters inclusivity, and communicates with transparency and accountability so we can help companies measurably improve the way they hire.

Join us to do the best work of your career, solving meaningful problems with remarkable teams.

Greenhouse is looking for a Senior Product Security Engineer (AI/ML) to join our team.

Security at Greenhouse is foundational to our success and is critical for building and maintaining user and customer trust. From influencing how we write software, deploy infrastructure, and make architectural decisions, security is a major focus here  are excited to strengthen our program with the addition of a Product Security Engineer with AI security expertise.

You will serve as the team’s Subject Matter Expert (SME) on AI security engagements while contributing to our broader security engineering goals. You will partner with our engineers to improve security best practices across our agile SDLC, focusing on securing our emerging AI and Machine Learning features.

• An Entrepreneurial Problem-Solver - Proactively stay current on AI/ML trends and identify ways to harden our systems before risks manifest
• A Pragmatic Partner - Balance business speed with security, enabling innovation and supporting development velocity
• An Independent Driver - Demonstrate a high bias for action and comfort working independently
• A Generous Collaborator - Listen well and work effectively with diverse audiences, from legal counsel to infrastructure engineers
• A Clear Communicator - Translate complex technical concepts into real-world business impact through writing, documentation, or presentations

• Act as the primary advisor for securing AI/ML workflows, conduct threat modeling for AI product features, and define guardrails for Large Language Model (LLM) usage
• Advise and review on agentic AI usage across the R&D department
• Perform security testing and source code review of applications and underlying platforms for both AI and non-AI systems
• Help upskill the wider security and engineering teams on AI security fundamentals and common threats
• Partner with compliance and legal teams on AI governance decisions and processes
• Act as a security partner, building and maintaining relationships with product and engineering teams to integrate security into the development process
• Embed security principles and controls to achieve a secure-by-default posture
• Secure modern technology stacks including Kubernetes, Docker, AWS, and CI/CD tooling
• Participate in the security engineering on-call rotation to triage and respond to urgent security alerts outside of standard business hours when necessary

• Practical experience securing model training and inference pipelines (specifically ARC and MLFlow) and securing AI Gateways
• Professional experience as a developer releasing production code with modern workflows like Agile, Git Ops, and CI/CD
• Hands-on experience using modern AI development tools and interacting with OpenAI/Gemini APIs
• A strong foundation in AWS core services, Kubernetes, Linux systems, and networking principles
• Expert-level knowledge of web and AI/ML application security topics (e.g. OWASP Web, LLM, Agent)
• Exposure to AI compliance frameworks (e.g. ISO
  42001)
• Experience with architecture reviews, auth protocol flows related to SAML, OAuth2, and OIDC
• Deep understanding of the AI ecosystem including design principles, threat models, and appropriate tools
• Ability to perform structured and ad-hoc threat models yielding practical, code-level recommendations balancing security with development speed
• Experience working with Ruby on Rails is a plus
• Your unique talents and transferable skills are valued; if you don't meet 100% of the qualifications, we still encourage you to apply

Applicants must be legally eligible to work in Canada as of the start date. We are unable to support sponsorship at this time.

For purposes of processing or administering your employment relationship, personal information that you provide may be transferred to and…