Intone
From Intone's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
You will help monitor and respond to how AI tools, agents, and connectors are used across the organization.
This is a remote, 9-month contract role for an AI Security Engineer based in Oakland, California. You will help monitor and respond to how AI tools, agents, and connectors are used across the organization. Working with the Infrastructure Applications Support Manager within Digital Innovation and Technology (DigIT) and in close partnership with Security, you will design and implement monitoring, alerting, and response capabilities using Microsoft Defender and other enterprise security tools. The scope includes enterprise AI tools such as Microsoft 365 Copilot, ChatGPT EDU, and Box AI, as well as AI agents, third-party connectors, and Model Context Protocol (MCP) connections.
Assess current security tools and configuration to identify AI monitoring gaps and what is needed to close them.
Configure cloud access security broker (CASB) and related capabilities to discover and classify sanctioned and unsanctioned AI applications, model providers, and MCP servers.
Establish usage baselines for approved enterprise AI tools to identify unusual activity.
Use data loss prevention and data security capabilities to identify sensitive data flowing into AI tools.
Inventory AI agents, OAuth-connected apps, connectors, and MCP connections that touch data, including owner, permissions, and approval status.
Develop policies and alerts for high-risk patterns such as over-permissioned connectors, unapproved third-party AI apps, and personal AI accounts connecting to data.
Monitor AI agents for risky configurations, data access, and behavior, in line with the Agentic AI Guardrails.
Develop detections, alerts, and hunting queries for AI-related risks such as data exfiltration, prompt injection, and anomalous agent activity.
Integrate audit and usage logs from enterprise AI platforms, where feasible, to centralize monitoring.
Partner with Security on triage and response runbooks defining severity, escalation, and actions per alert type.
Design monitoring that respects privacy requirements, including the Electronic Communications Policy, by favoring risk signals and metadata over content review.
Research incoming requests for new AI tools, agents, connectors, and MCP servers, assess security risks, and recommend approval conditions.
Document risks, controls, and recommended practices aligned with the AI Acceptable Use Standard, the Agentic AI Guardrails, and UC policy IS-3.
Report on AI usage, risk trends, and open issues for security, program, and leadership audiences.
Required
Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent experience.
5 or more years of security engineering, security operations, or cloud security experience in an enterprise environment.
Hands-on experience with CASB, SIEM, and data loss prevention tools, including app discovery, policies, and alerts.
Experience writing detection and hunting queries, and scripting (for example, Python or PowerShell) for automation, log analysis, and API integrations.
Working knowledge of identity and access management, including OAuth consent, application permissions, and service accounts.
Understanding of AI security risks such as data leakage, prompt injection, over-permissioned agents and connectors, and shadow AI.
Strong written communication skills, including documenting risks, controls, and runbooks for varied audiences.
Ability to work independently and collaboratively in a remote, cross-functional environment.
Experience with Microsoft security tools such as Microsoft Defender and Microsoft Purview.
Experience securing AI agents and integrations, such as MCP servers, connectors, or AI APIs.
Familiarity with admin, audit, and compliance features of Microsoft 365 Copilot, ChatGPT EDU, or Box AI.
Familiarity with AI risk frameworks such as the NIST AI RMF or the OWASP Top 10 for
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in
