Staff Engineer, AI Security and Product Security

<div class="content-intro"><h2>Your work will change lives. Including your own.&nbsp;</h2> <p><iframe style="width: 655px; height: 367px;" src="https://www.youtube.com/embed/NzerLX6koWI?si=KaDRt0AYxcwmtZus" width="655" height="367"></iframe></p></div><p><strong>The Impact You’ll Make</strong></p> <ul> <li><strong>Define and lead product security strategy</strong> across web, mobile, API, cloud, infrastructure, and container security — conducting threat modeling, risk assessments, and security reviews throughout the development lifecycle with a strong shift-left focus.</li> <li><strong>Embed secure development practices</strong> by designing and implementing secure coding standards, encryption, and security testing methodologies in close collaboration with development and ML teams, ensuring products are secure, resilient, and trustworthy.</li> <li><strong>Own Enterprise AI Security end-to-end</strong> — from securing LLM integrations, agentic pipelines, and ML model ingestion to defending against AI-specific threats (prompt injection, data poisoning, model extraction, RAG poisoning, ), building AI incident response playbooks, and red-teaming AI systems across Recursion's product surfaces.</li> <li><strong>Secure the AI supply chain and MLOps infrastructure</strong> by vetting third-party foundation models, open-source weights, and AI APIs before production integration, and partnering with ML engineering to protect training pipelines, feature stores, and model serving endpoints.</li> <li><strong>Champion compliance and AI governance</strong> by operationalizing frameworks such as OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act requirements — collaborating with legal, privacy, and responsible AI teams to support audits and evolving regulatory expectations.</li> <li><strong>Scale security as a force multiplier</strong> by evaluating and deploying security tooling, detecting policy violations, driving security outcomes, and ensuring security initiatives never become a bottleneck to business objectives.</li> <li><strong>Elevate the security culture</strong> across the organization by serving as a subject matter expert, mentoring engineering teams, and leading incident response efforts from investigation through mitigation and prevention.</li> <li><strong>Maintain the security foundation</strong> through thorough documentation — including security requirements, guidelines, and incident response plans — and hands-on penetration testing and code reviews to simulate and get ahead of real-world threats.</li> </ul> <p><strong>The Team You'll Join</strong></p> <ul> <li>You will join