openrouter - Security Engineer

United States4mo ago

Remote Mid NA Cloud Computing Artificial Intelligence Security Engineer Python TypeScript GCP Cloudflare Vercel

Requirements

• Experience securing AI infrastructure, inference platforms, or LLM-powered products. • Familiarity with AI-specific threat models - prompt injection, model abuse, agent misuse, key exfiltration, and similar emerging attack surfaces. • Automation and scripting in Python, TypeScript, or similar. • The base salary for this full-time position in the United States, spanning multiple internal levels depending on qualifications, ranges between $230,000 to $310,000 plus benefits & equity. Compensation for internationally based candidates will vary to reflect local market conditions.

Responsibilities

• Own application and cloud infrastructure security across Cloudflare, GCP, and Vercel, including our edge workers, data stores, and the routing path that handles every request. • Stand up vulnerability scanning (across our codebase and cloud infrastructure), triage findings, and drive remediation in partnership with engineering teams. • Investigating, triaging and remediating responsible disclosure vulnerabilities that come through our bug bounty programs. • Lead threat modeling for new product surfaces - the API, SDKs, dashboards, and agentic workloads - and make sure security is part of the design from the start. • Build out incident response and disaster recovery, including runbooks, tabletop exercises, and on-call expectations as the company scales. • Partner with our IT and compliance lead on frameworks such as SOC 2, HIPAA, GDPR, CCPA/CPRA, ISO 27001, ISO 277001, and ISO 42001 contributing the engineering pieces required to support those programs.