MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

The Principal AI Security Engineer will serve as an enterprise subject-matter expert for securing AI platforms, agents, integrations, data sources, and supporting infrastructure. This role identifies AI-specific threats, translates risk and governance requirements into practical technical safeguards, and helps teams securely adopt emerging AI capabilities.

The role combines security engineering, architecture review and design, threat modeling, monitoring, and cross-functional collaboration to establish a consistent enterprise approach to secure AI adoption.

MathWorks is on a hybrid schedule (3 days at the Natick, MA Headquarters, 2 days' work from home)

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

• Serve as the enterprise security expert for AI platforms, agents, integrations, APIs, and emerging AI use cases.


• Assess AI-related risks, including prompt injection, data exposure, insecure tool invocation, excessive agency, and adversarial inputs.


• Design, implement, and validate security controls for AI platforms, including data protection, access controls, monitoring, guardrails, and approved data-use patterns.


• Conduct security architecture reviews, threat modeling, control assessments, and risk-based evaluations of AI solutions and third-party services.


• Translate policies, governance requirements, and control frameworks into practical technical requirements, implementation plans, and operational processes.


• Develop monitoring, logging, detection, and investigation capabilities for AI activity and integrate relevant telemetry into security operations.


• Partner with Security Operations and incident response teams to improve AI-related detection, investigation, and response processes.


• Collaborate across technical and governance teams to incorporate security requirements into AI platforms, services, and workflows.


• Develop reusable security patterns, implementation guidance, metrics, and evidence to support engineering, governance, risk, and audit activities.


• Monitor changes in AI technologies, threats, and industry guidance, and evolve the organization's security approach accordingly.

• Experience in security engineering, cloud security, data security, application security, detection engineering, or related technical security discipline.


• Experience implementing, operating, or validating security controls such as data protection, DLP, SIEM, cloud security, API security, endpoint security, or application security.


• Experience performing security assessments, architecture reviews, threat modeling, or other risk-based security evaluations.


• Experience translating security risks and governance requirements into practical technical safeguards and implementation plans.


• Strong understanding of data protection principles, including sensitive data discovery, classification, encryption, privacy, and secure data handling.


• Strong analytical, communication, and collaboration skills, with the ability to align technical and nontechnical stakeholders on practical solutions.


• Experience securing AI platforms, AI agents, machine learning systems, or other emerging technologies preferred.


• Knowledge of AI-specific threats such as prompt injection, model misuse, sensitive data exposure, adversarial inputs, and insecure tool invocation preferred.


• Familiarity with AI architectures, APIs, Model Context Protocol services, retrieval-augmented generation, guardrails, and human-in-the-loop controls preferred.


• Experience automating security processes through scripting, APIs, infrastructure as code, or similar approaches preferred.


• Familiarity with NIST AI RMF, NIST Cybersecurity Framework, ISO/IEC 27001, ISO/IEC 42001, or OWASP guidance for AI applications preferred.


• Experience developing reusable security patterns that enable emerging technology adoption while effectively managing risk preferred.


• Relevant AI security or governance certifications, such as ISACA Advanced in AI Security Management (AAISM), IAPP Artificial Intelligence Governance Professional

• A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.


• Visa sponsorship will not be provided for this position.


• Candidates for this position must be authorized to work in the United States on a full-time basis for any employer without restriction.

VEVRAA Federal Contractor.
We request Priority Protected Veteran & Disabled Referrals for all of our locations within the state.