AI Security Engineer, Senior

Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer’s and partner’s needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You’ll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about—locally and globally. Come make an impact every day at Zebra. What We're Looking For: Develops and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. Serves as a senior technical resource for AI and API security, with primary focus on AI security review, governance, and secure-by-design guidance. Responsibilities Perform AI security reviews of AI-enabled applications and services submitted through the enterprise intake process. Support the assessment of AI-specific risks including prompt injection, data handling concerns, access controls, and integration risks under the guidance of senior engineers. Evaluate GenAI applications, LLM-based tools, and agentic AI services for security posture, data classification, and control alignment. Development and documentation of AI security standards, policies, and guidelines aligned with NIST AI RMF, OWASP LLM Top 10, and internal frameworks. Lead API security tasks including API discovery, risk identification, and review of API architectures (REST, gRPC, microservices) with attention to APIs that serve or interact with AI systems. Identify, evaluate, and help justify new solutions and controls to improve the enterprise security posture, including AI and API security tooling. Evaluate application and network architecture to support business requirements, security best practices, policies, and standards. Implement and support enterprise security solutions across the team’s tool portfolio. Provide consultation to business and development teams on how to implement AI-enabled solutions securely. Create documentation and diagrams for internal and external audiences, including AI security review records and risk summaries. Conduct risk assessments, analyzing data from various sources and incorporating business needs to articulate risk. Analyze data and build informational security reports from different sources for a multi-tier audience (e.g., Executive, Management, and Technical). Participate in operational support for security platforms across identity, endpoint detection and response, internet access security, email security, endpoint privilege management, and cloud security. Manage technical relationships with security software vendors within assigned areas. Must be able to work hybrid (3 days in office/2 remote) from Mississauga, CA. Qualifications Minimum Experience: Bachelor’s degree or equivalent experience. 5+ years experience i n IT Security. Can include security architecture, risk analysis, security solution deployment and configuration, security operations, and incident response. Expertise i n AI-specific security risks: prompt injection, data exposure, model misuse, and insecure integrations. Familiarity with identity and access management, secrets management, and Zero Trust concepts. Preferred Skills and Experience: Experience working in a global, heterogeneous, cloud and on-prem environment. Some exposure to AI/ML systems, application security, or API security is a plus but not required. AI & Emerging Technology Security (Developing): Curiosity and willingness to develop hands-on knowledge of generative AI systems, LLMs, RAG architectures, and agentic AI patterns (MCP, tool calling, orchestration frameworks). Ability to learn and apply AI security frameworks such as NIST AI RMF, OWASP LLM Top 10, and MITRE ATLAS with guidance. Expertise in scripting or programming languages (e.g., Python) for automation or testing is a plus; software development background is welcomed. Application & API Security: Ability to understand new systems and tools. Can include API security, application security, secrets management, and secure software design. Security Tooling: Ability to learn and operate enterprise security platforms. Familiarity with tools in use at Zebra including CrowdStrike Falcon (EDR/XDR), Zscaler (ZIA/ZPA), Proofpoint Email Security, BeyondTrust Endpoint Privilege Management, and Salt Security (API Security) is a plus. Working knowledge of NIST Cyber Security Framework (CSF). Preferred: Experience with cloud platforms (e.g., AWS, Azure, GCP). Active participation in the security community, through online resources and in-person conferences. Exposure to or personal interest in AI tools, GenAI platforms, or agentic developer tooling. Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at [email protected] . Know Your Rights: https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Pay Range: $90,960.00 - $136,440.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 10% of base pay, in accordance with the terms of the applicable incentive plan. Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive – including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you via @zebra.com email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department. AI Technology Statement: Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However, every decision regarding interviews and hiring is made by our dedicated team, because we believe people make the best decisions about people. For more on how we use technology in hiring and how we process applicant data, see our Zebra Privacy Policy .