Staff AI Security Engineer, Information Security

Description & Requirements

About Team: As AI systems (LLMs, RAG pipelines, Agentic workflows) quickly integrate into every facet of enterprise operations, keeping them safe, secure, and compliant is our top priority. We aren't just looking for a traditional security engineer who can run a static code analysis tool. We are looking for an AI Security Pioneer who will lead the charge in defining how we secure internal AI solutions, build our core defensive infrastructure, and run our automated daily guardrails. In a couple of years, you'll be the person who defines what "secure by default" means for every AI product we ship here. If you love threat modeling LLM applications, building high-throughput middleware, and running daily security operations for cutting-edge AI systems, you’re in the right place! What you'll do: Implement & Maintain Enterprise AI Security Stack 1. Implement and maintain high-performance, low-latency security middleware, intercepting enterprise traffic to LLM providers. 2. Defensive Controls: Build and fine-tune real-time detection systems for Prompt Injection, Jailbreaks, PII/IP Leakage, Insecure Output Handling, and Model Denial of Service (DoS). 3. Policy Engine Integration: Implement dynamic policy enforcement (e.g., block unauthorized system prompts, route traffic based on compliance classification). 4. System Observability: Instrument the guardrail with robust logging, tracing, and telemetry to monitor security violations, usage patterns, and potential adversarial attacks. 5. SIEM integration Operate & Monitor the Stack Daily 6. Daily Security Operations: Monitor the daily security console, investigate triggered alerts, and triage flagged prompts/responses. 7. Continuous Tuning: Run daily/weekly evaluation loops to minimize false-positive rates of filters while ensuring robust security posture. 8. Incident Response: collaboration with the InfoSec IR team for AI-specific security incidents. 9. SLA & Resilience Management: ensure the AI security stack operates at enterprise scale with target uptime, optimizing latency overhead to stay under critical human-interaction thresholds. Internal AI Security Risk Management 10. Threat Modeling & Risk Assessments: Perform specialized AI-specific threat modeling (using OWASP Top 10 for LLMs, MITRE ATLAS) for critical internal AI projects. 11. Secure Architecture Reviews: Work with global and local InfoSec stakeholders to advise internal teams on secure RAG implementation, secure agentic tools/actions, prompt sanitization, vector database access controls, and model deployment strategies to ensure we meet global policies. 12. Standards & Policies: work with internal stakeholders to continuously update security baselines, and golden paths for deploying AI models securely. Preferred Qualifications: 1. Educational Background: bachelor’s or master’s degree in computer science, Cybersecurity, Data Science, or equivalent practical experience. 2. Experience: 6+ years of security engineering experience, with at least 2+ years explicitly focused on AI/ML Security or Application Security for AI workloads. 3. GenAI / LLM Practical Knowledge: Deep understanding of transformer models, vector databases, prompt engineering, frameworks or platforms like Swift, Dify, Coze, TiOne, LangChain, LlamaIndex, or Semantic Kernel. 4. AI Security Expertise: Familiarity with the OWASP Top 10 for LLMs, MITRE ATLAS framework, and common prompt-injection / model extraction techniques. 5. Modern Security Infrastructure: Solid understanding of API security protocols (OAuth2, mTLS, JWT, Rate Limiting), CI/CD security integrations, and cloud infrastructure. 6. DevOps & Containers: Hands-on experience with Docker, Kubernetes, and managing services at scale. 7. Knowledge of Multi-Level Protection Scheme, Cross-border data transfer and domestic AI compliance requirements 8. A collaborative spirit with a proactive and self-driven attitude 9. Strong communication skills and the ability to work cross-functionally in a large organization. 10. Strong analytical, problem-solving skills Walmart, Inc. is an Equal Opportunity Employer By Choice. We believe we are best equipped to help our associates, customers and the communities we serve live better when we really know them. That means understanding, respecting and valuing unique styles, experiences, identities, ideas and opinions while being welcoming of all people. Walmart doesn’t charge any recruitment or similar fee in the recruitment process, including but not limited to interview, offering, and onboarding. 本职位由沃盛咨询（深圳）有限公司发布

General Information

Position Title

Staff AI Security Engineer, Information Security

Main Business Entity

Walmart Sourcing

Department 1

Security

Department 2

Security

Location

Shenzhen, China