Drimva

Fortinet

Principal AI Security Engineer

$170K–$225K

Sunnyvale, CA · Principal · Full-time · Posted Sep 1, 2026

Experience
7+ years; related fields include information security, product security, application security, AI/ML, or data science.
Education
BS in Computer Science, Cyber Security, another tech-related degree, or equivalent experience.
Visa sponsorship
Must be authorized to work in the U.S. without sponsorship.

About the job

Secures Fortinet’s AI applications by assessing risks and vulnerabilities, building protective controls, and advising development teams on secure AI design.

What you'll do

  • Conduct code reviews, AI red teaming, threat modeling, and architectural reviews for AI products and features.
  • Integrate security checks into CI/CD and develop vulnerability mitigations, guardrails, filters, and policy enforcement controls.
  • Research AI attack vectors, advise internal teams, and coach peers on AI/ML security.

What they ask for

  • 7+ years of experience in information security, product security, application security, AI/ML, data science, or related fields.
  • Strong understanding of LLM application architectures, AI/ML attacks, OWASP risks, API security, cloud-native architecture, and CI/CD and DevSecOps.
  • Proven experience in manual application penetration testing and security code review.
  • BS in Computer Science, Cyber Security, another tech-related degree, or equivalent experience.

Nice to have

  • MS or PhD in Artificial Intelligence or a related field.
  • Experience in AI red teaming, adversarial testing, AI-assisted vulnerability research, AI-generated code security analysis, or MLOps/deep learning infrastructure.

Pay

$170,000-$225,000 USD base salary

Tools

LLM, MCP, STRIDE, MAESTRO, OAuth, JWT, CI/CD, OWASP LLM Top 10

AI focus

AI application security, including threat modeling, red teaming, attack research, guardrails, and security controls for LLM-based applications, chatbots, MCP implementations, and autonomous agents.

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 5, 2026 (UTC)