AI Security Engineer
Alpaca is a brokerage infrastructure company providing developer APIs for stocks, options, fixed income, and crypto trading, plus tokenization infrastructure for TradFi–DeFi markets.
Funding history
Investors
About Alpaca
Alpaca provides API-first brokerage infrastructure for fintechs, institutions, algorithmic traders, and developers. Its offerings include Broker API, Trading API, market data, self-clearing brokerage services, crypto services, and the Instant Tokenization Network for in-kind minting and redemption of tokenized assets.
Skills
About the Role
You will define and enforce security controls for AI agents, automations, tools, and integrations. You will design guardrails, establish identity, data-handling, secrets, and logging requirements, review new AI integrations, and support AI-specific incident response. You will also help develop AI-powered security tooling, partner on governance evidence, and participate in the security on-call rotation.
Requirements
- 2+ years of experience in security engineering, application security, or cloud security
- Experience securing LLM applications, AI agents, or AI developer tools
- Understanding of AI risks including prompt injection, data leakage, excessive agency, and insecure tool use
- Experience with OAuth, service accounts, and secrets management
- Programming experience in Python or another general-purpose language
- Experience with CI/CD security checks and cloud-native deployments
- Experience with security operations or incident response
- Experience building AI-assisted security operations workflows and AI security telemetry
- Willingness to participate in an on-call rotation
Responsibilities
- Define authentication, authorization, attribution, and auditing controls for AI agents, bots, and automations
- Own security requirements for AI tool integrations, including least-privilege access and credential handling
- Define and enforce security settings, data-handling rules, and access policies for approved AI tools
- Define security requirements for internal AI applications and review new integrations
- Design and implement guardrails for AI applications and agents
- Develop AI-powered tooling for security detection, investigation, and response
- Define security logging requirements for AI systems and partner on detections
- Maintain visibility into AI tool usage and approved configurations
- Lead AI-specific aspects of security incidents
- Participate in the Security Operations on-call rotation
- Translate AI security standards into technical controls
- Provide technical evidence for AI governance controls
Benefits
- Stock options
- Health benefits
- One-time USD 500 new-hire home-office setup
- USD 150 monthly stipend via a Brex Card
