Job SummaryMathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: ;br>
The Principal AI Security Engineer will serve as an enterprise subject-matter expert for securing AI platforms, agents, integrations, data sources, and supporting infrastructure. This role identifies AI-specific threats, translates risk and governance requirements into practical technical safeguards, and helps teams securely adopt emerging AI capabilities.
The engineer will partner with Information Security, Enterprise AI Governance, Data Security, IAM, Security Operations, Architecture, Procurement, Product Security Governance, and AI platform teams. The role combines security engineering, architecture review, threat modeling, monitoring, and cross-functional collaboration to ensure AI security controls are effective, scalable, and aligned with business needs.
This role offers the opportunity to help define how AI is securely adopted across the enterprise and establish security patterns, safeguards, and governance approaches for emerging AI technologies.
MathWorks is on a hybrid schedule (3 days at the Natick, MA Headquarters, 2 days' work from home)MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.
Responsibilities - Serve as the enterprise security expert for AI platforms, agents, integrations, APIs, and emerging AI use cases.
- Assess AI-related risks, including prompt injection, data exposure, insecure tool invocation, excessive agency, and adversarial inputs.
- Design, implement, and validate security controls for AI platforms, including data protection, access controls, monitoring, guardrails, and approved data-use patterns.
- Conduct security architecture reviews, threat modeling, control assessments, and risk-based evaluations of AI solutions and third-party services.
- Translate policies, governance requirements, and control frameworks into practical technical requirements, implementation plans, and operational processes.
- Develop monitoring, logging, detection, and investigation capabilities for AI activity and integrate relevant telemetry into security operations.
- Partner with Security Operations and incident response teams to improve AI-related detection, investigation, and response processes.
- Collaborate across technical and governance teams to incorporate security requirements into AI platforms, services, and workflows.
- Develop reusable security patterns, implementation guidance, metrics, and evidence to support engineering, governance, risk, and audit activities.
- Monitor changes in AI technologies, threats, and industry guidance, and evolve the organization's security approach accordingly.
Minimum Qualifications- A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.
- Visa sponsorship will not be provided for this position.
- Candidates for this position must be authorized to work in the United States on a full-time basis for any employer without restriction.
Additional Qualifications - Experience in security engineering, cloud security, data security, application security, detection engineering, or related technical security discipline.
- Experience implementing, operating, or validating security controls such as data protection, DLP, SIEM, cloud security, API security, endpoint security, or application security.
- Experience performing security assessments, architecture reviews, threat modeling, or other risk-based security evaluations.
- Experience translating security risks and governance requirements into practical technical safeguards and implementation plans.
- Strong understanding of data protection principles, including sensitive data discovery, classification, encryption, privacy, and secure data handling.
- Strong analytical, communication, and collaboration skills, with the ability to align technical and nontechnical stakeholders on practical solutions.
- Experience securing AI platforms, AI agents, machine learning systems, or other emerging technologies preferred.
- Knowledge of AI-specific threats such as prompt injection, model misuse, sensitive data exposure, adversarial inputs, and insecure tool invocation preferred.
- Familiarity with AI architectures, APIs, Model Context Protocol services, retrieval-augmented generation, guardrails, and human-in-the-loop controls preferred.
- Experience automating security processes through scripting, APIs, infrastructure as code, or similar approaches preferred.
- Familiarity with NIST AI RMF, NIST Cybersecurity Framework, ISO/IEC 27001, ISO/IEC 42001, or OWASP guidance for AI applications preferred.
- Experience developing reusable security patterns that enable emerging technology adoption while effectively managing risk preferred.
