Sr. AI Product Security Engineer

Company Overview

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity. Using Docusign’s Intelligent Agreement Management platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

What you'll do

As an AI Product Security Engineer, you will lead the implementation of AI and data security practices within the product Software Development Lifecycle (SDL). You will collaborate closely with cross-functional teams to ensure secure-by-design principles are embedded in AI systems and data platforms, driving measurable security outcomes and supporting the organization’s digital transformation.

 

This position is an individual contributor role reporting to the Sr Director of AI & Data Security.

 

Responsibility

• Design, implement, and maintain security controls for AI/ML products and platforms

• Collaborate with AI/ML teams to implement secure model development practices, including secure training pipelines, data governance, and model monitoring

• Conduct threat modeling, risk assessments, and security reviews of AI/ML systems, data pipelines, and APIs

• Experience integrating or building AI-powered tools to assist with vulnerability detection, code review, or threat modeling

• Identify and mitigate vulnerabilities specific to AI/ML, such as adversarial attacks, data poisoning, and model inversion

• Collaborate with product, engineering, and data science teams to integrate security best practices into the AI/ML development lifecycle

• Develop and enforce secure coding guidelines and review code for security vulnerabilities

• Monitor, detect, and respond to security incidents related to AI/ML products

• Stay up-to-date with the latest AI/ML security research, tools, and attack vectors

• Educate and train internal teams on AI/ML security risks and mitigation strategies

Job Designation

Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation)

 

Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

What you bring

Basic

• 8+ years of experience in application or product security, with at least 1 year focused on AI/ML systems

• Experience with AI/ML concepts, architectures, and frameworks

• Experience with secure software development practices and tools

• Experience with common AI/ML security threats and mitigation techniques

• Experience programming languages such as Python, Java, or C++

• Experience with cloud platforms (AWS, Azure, GCP) and securing cloud-based AI/ML deployments

• Experience secure software development practices, AI/ML model security, and data governance

• Experience operationalizing security governance and compliance in complex environments

• Demonstrated ability to translate technical security risks into business context and actionable recommendations

Preferred

• Excellent communication and collaboration skills, with the ability to influence and educate stakeholders at all levels

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field

• Excellent stakeholder management and communication skills across technical and business audiences

• Strong cross-functional collaboration and stakeholder management skills, especially with Product, Engineering, Data, Privacy, and executive teams

• Excellent collaboration and communication management skills across technical and non-technical audiences

• Experience with exploiting common security vulnerabilities

• Knowledge of common exploit mitigations and how they work

• Coding and scripting experience in one or more general purpose languages