Staff Information Security Engineer

Rithum runs a commerce network used by more than 40,000 brands, suppliers and retailers to sell and fulfil across hundreds of e-commerce channels. It is a remote-first company.

This staff security engineer owns the overlap between AI adoption and information security. The work is as much building as reviewing: default-on controls across cloud and enterprise environments written as policy and infrastructure as code, identity and access boundaries including for AI systems and agent identities, automating security workflows such as evidence collection and access reviews, connecting SIEM, CSPM and SAST/DAST tooling to LLM layers, setting security requirements for AI features, and threat modelling agentic and LLM-based systems. You would also help maintain the risk register and vendor assessments.

Rithum wants 5+ years in security engineering with real AI/ML security depth, hands-on enterprise and cloud identity experience, Terraform or OPA/Rego and Python for automation, AWS security expertise including multi-account governance, application security and threat modelling, and working knowledge of SOC 2 or ISO 27001.

Base pay is $170,000 to $220,000 a year across all US locations, plus a discretionary bonus. Remote in the United States, with up to 10% travel.