Principal AI Security Engineer (LATAM & Mexico)

About the role

DaCodes is seeking a Principal AI Security Engineer to lead the design, implementation, and continuous improvement of security controls for Generative AI, Large Language Models, AI agents, and MLOps ecosystems across LATAM and Mexico. The role combines deep cybersecurity expertise with cloud‑native security and AI‑specific threat mitigation.

Key responsibilities

• Design, implement, and maintain security controls for GenAI, LLM, AI Agent, and MLOps platforms.
• Develop AI security guardrails, access controls, prompt protection mechanisms, and data protection strategies.
• Lead AI‑focused threat modeling and align controls with NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, and MITRE ATLAS.
• Collaborate with Red Teams and SOC to perform adversarial testing and security assessments.
• Design incident‑response procedures and playbooks for AI‑related security events.
• Integrate AI platforms with secrets management, identity management, and cloud‑native security solutions.
• Deploy observability and monitoring for AI applications and model behavior.
• Drive AI governance, security policies, compliance initiatives, and responsible AI adoption.
• Partner with engineering to embed security into CI/CD pipelines and development workflows.
• Develop operational metrics, security reporting, and performance dashboards; participate in on‑call rotations.

Required profile

• Seasoned cybersecurity professional with strong cloud security expertise.
• Hands‑on experience securing AI‑powered platforms and enterprise‑scale environments.
• Proven ability to work with engineering, platform, compliance, risk, and security teams.
• Deep knowledge of emerging AI threats and mitigation strategies.

Required skills

• Cloud security
• Generative AI security
• Large Language Model security
• AI agents security
• MLOps security
• NIST AI Risk Management Framework
• ISO/IEC 42001
• OWASP LLM Top 10
• MITRE ATLAS
• Red Team testing
• Security Operations Center assessments
• Incident response
• Secrets management
• Identity management
• CI/CD pipeline security
• Observability and monitoring
• DevSecOps