AI Security Engineer

About the role

ReapReap is building a secure, AI‑enabled financial platform and needs an engineer to turn recent data‑leakage incidents into robust, enterprise‑wide controls. You will design and operate Cloud Access Security Broker (CASB) and Data Loss Prevention (DLP) solutions that protect sensitive payment data while enabling safe AI tool usage across the company.

Key responsibilities

• Deploy and operationalise Microsoft Defender for Cloud Apps (or equivalent CASB), configuring app discovery, shadow‑IT reporting, session controls and data‑upload blocking for unsanctioned AI platforms.
• Design, implement and maintain DLP policies that detect and block sensitive data (PAN, IBAN, account numbers, customer identifiers) across CASB, Microsoft Purview and endpoint agents.
• Write SIEM detection rules (KQL) to flag bulk Snowflake exports followed by uploads to consumer AI services and anomalous SaaS upload volumes.
• Onboard approved enterprise AI tools with zero‑retention settings, audit logging and Okta SSO integration.
• Maintain a shadow‑AI inventory, classify tools against the risk framework and report findings to the CISO on a monthly basis.
• Develop and own the AI data‑leakage incident‑response playbook and prompt‑injection detection for internal AI‑integrated products.

Required profile

• Hands‑on experience deploying CASB solutions such as Microsoft Defender for Cloud Apps, Netskope or Zscaler, including shadow‑IT discovery and data‑upload controls.
• Proven ability to author and tune DLP policies in Microsoft Purview or comparable platforms.
• Deep understanding of how major AI platforms (OpenAI, Anthropic, Google) handle submitted data and the requirements of zero‑retention enterprise DPAs.
• Experience writing SIEM detection queries (KQL or equivalent) for data‑exfiltration scenarios.
• Solid knowledge of AWS security fundamentals (IAM, network controls, API‑gateway protection).
• Familiarity with GDPR Article 28 implications for AI‑tool data processing.

Required skills

• Microsoft Defender for Cloud Apps (CASB)
• Microsoft Purview DLP
• SIEM/KQL query writing
• AWS IAM and network security
• OpenAI, Anthropic, Google AI platforms
• Netskope or Zscaler

What we offer

• Remote‑first, global fintech environment backed by a fast‑moving acquisition by Payward/Kraken.
• Inclusive, vibrant culture with annual leave, public holidays and health‑insurance budget.
• Flexible remote work options and home‑office equipment budget.
• Corporate Reap Card for expense‑free spending.
• Opportunity to shape security controls for a cutting‑edge AI threat vector.