# Senior AI Platform Security Engineer

**Company:** [Front](https://hotfix.jobs/companies/front)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $187k – $250k/yr
**Experience:** 7+ years
**Skills:** AWS, Snowflake, Infrastructure As Code, CI/CD, Kubernetes, Observability, Secrets Management, Vulnerability Management, Cloud Security, RBAC, Abac, Mcp, Workato, Terraform, IAM
**Posted:** 2026-08-20

> This role defines, builds, and secures the internal platform supporting Front’s engineering, GTM, data, and AI tooling. It owns AWS and Snowflake infrastructure, paved-road delivery, observability, access controls, vulnerability management, incident response, compliance support, and AI-client security.

## Job Description

## Responsibilities
- Define standards, reference architecture, security requirements, and review processes for internal software and AI systems.
- Partner with product engineering, GTM Systems, Data, Enterprise Security, Legal, and IAM teams to establish and adopt platform conventions.
- Own AWS and Snowflake infrastructure, including compute, networking, data stores, DNS, certificates, environments, infrastructure as code, observability, and cost management.
- Build and maintain CI/CD pipelines, testing and security gates, deployment and rollback workflows, golden paths, templates, base images, shared modules, and self-service automation.
- Design secrets architecture with centralized storage, scoped short-lived credentials, and automated rotation.
- Secure infrastructure and the SDLC through IaC, container, dependency, supply-chain, secret, and pipeline security controls.
- Harden cloud configurations against CIS or equivalent baselines, manage drift, and operate vulnerability-management processes.
- Review infrastructure, integrations, and AI tooling before governed-data access; maintain connectivity inventories and least-privilege network and access boundaries.
- Monitor platform, integration, and AI-client security signals; develop detections for anomalous queries, data egress, off-hours access, privilege escalation, and other threats.
- Define data-loss-prevention controls for governed-data paths, including AI responses and downstream exports.
- Respond to incidents, preserve evidence, coordinate with Enterprise Security, and maintain and rehearse incident runbooks and tabletop exercises.
- Support SOC 2, ISO, and related compliance evidence collection; conduct access reviews for MCP, Workato, and AI-client integrations.
- Implement RBAC, ABAC, or hybrid access controls, JML automations, just-in-time access, and periodic access reviews.
- Troubleshoot MCP and AI-client integrations, maintain semantic-layer configuration, and investigate data-quality issues.

## Requirements and qualifications
- Experience building and operating platform and security practices for internal software and AI systems.
- Ability to define standards, architecture, review bars, and secure paved roads while implementing them directly.
- Experience with AWS, Snowflake, infrastructure as code, CI/CD, observability, secrets management, vulnerability management, cloud security, and access control.
- Experience securing AI clients, MCP, Workato, data integrations, governed data, and semantic layers is relevant.
- Strong cross-functional communication and consensus-building skills across engineering, systems, data, security, legal, IAM, and GRC teams.

## Compensation
- Annual base salary: **$187,000–$250,000**

## Similar jobs

- [Senior Software Engineer, Security](https://hotfix.jobs/jobs/9e9fbefb-bbfa-4328-b66f-77a8736b4499) - Harvey - San Francisco, CA - $188k – $282k/yr
- [Senior GRC Engineer](https://hotfix.jobs/jobs/d697c300-f74b-4139-a767-9387816d3aa4) - Square - Remote - $185k – $327k/yr
- [Senior Security Engineer, Detection & Response](https://hotfix.jobs/jobs/37a7b1d8-92a0-48d2-8ee3-02ab2a21f5ae) - Flexport - San Francisco, CA - $183k – $229k/yr
- [Senior GRC Analyst](https://hotfix.jobs/jobs/e5ffc43b-dac8-4c0a-be09-d1fa4e9cd8c5) - Gusto - San Francisco, CA - $183k – $205k/yr
- [Senior Detection Engineer II](https://hotfix.jobs/jobs/bc6380b5-c412-4bf8-a9b0-af8410baa07c) - Instacart - Remote - $192k – $243k/yr

**Apply:** https://hotfix.jobs/jobs/be3e0b84-8694-4a8e-9de2-2c078316c6b0
**Canonical:** https://hotfix.jobs/jobs/be3e0b84-8694-4a8e-9de2-2c078316c6b0