Security Engineer - Platform Security

The Platform Security team (PlatSec) defends Plaid against attackers. We own laptop security, cloud security, AI security, detection and response, and red teaming. Right now we're in growth mode. AI has expanded Plaid's attack surface faster than most security teams can adapt, and we're building the guardrails, identity controls, and detection systems to keep pace without slowing the business down. If you like solving problems nobody's solved yet, this is that team.

About the role

You'll be Plaid's first line of defense on AI security. You'll review new AI technologies to find security risks before they ship, then design and implement the controls that close them. You'll build the guardrails, identity management, and detection systems that let Plaid use AI aggressively without getting burned.

Responsibilities

- Review AI systems and integrations for security risk before and after deployment.

- Design and deploy guardrails, sandboxes, and other controls that contain what AI agents can do.

- Build or implement systems to track and manage AI identities, so we know what access every AI has been granted and can balance risk with agility.

- Detect and mitigate prompt injection across Plaid's AI surface area.

- Run AI-focused security reviews and set the bar other teams build to.

- Your impact: fewer AI-related incidents, faster AI shipping, and controls that scale. Plaid wants to be a leader in AI, internally and externally, and we can’t do that safely without you.

Qualifications

Must-have: hands-on experience securing AI technologies, including at least one of:

- deploying guardrails or sandboxes,

- managing AI identities,

- detecting or mitigating prompt injection,

- running AI security reviews, or

- implementing AI security tooling (built or bought).

- Nice-to-haves:

- Experience at a frontier AI lab or on a security team defending production AI systems at scale.

- Experience on a Infrastructure Security, Cloud Security, Platform Security, Corporate Security, Security Operations (SecOps), and/or Detection & Response team

- Software security review, SDLC, vulnerability discovery, and/or offensive security experience