AI Security Engineer
Bjak · Remote · China ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote
- AI Security focus
- Python & TypeScript
- 3+ years experience
- English required
Join BJAK, the leading mobile-first insurance platform in Southeast Asia, as it expands into broader financial services. You will secure AI products by managing risks associated with third-party models, agent permissions, and user data isolation. The team works globally to redefine financial accessibility through next-generation technology.
What you'll do
- Assess customer data sent to third-party model vendors for minimization and retention
- Design controls to limit AI agent permissions using least privilege principles
- Implement tenant and user data isolation across prompts and AI-connected services
- Threat model and test for prompt injection via uploaded documents and untrusted inputs
- Partner with Product and Engineering on safe document ingestion and output validation
- Support SC TRM and BNM RMiT compliance for AI technology risks and assessments
- Build security tests and monitoring for AI misuse and data exposure incidents
What you'll need
- Degree in Computer Science, Cybersecurity, AI, or equivalent experience
- 3+ years in application security, product security, or AI system security
- Experience implementing SC TRM and BNM RMiT controls or regulatory evidence
- Understanding of third-party LLM integrations, RAG, and AI architectures
- Knowledge of prompt injection, data leakage, and vendor disclosure risks
- Programming skills in Python and TypeScript/Node.js with AWS or GCP
- Strong English communication skills for global collaboration
Stack
- Python
- TypeScript
- Node.js
- AWS
- GCP
How you'll work
- Fully remote work environment
- Global team with over 20 nationalities
- English is the main working language