Senior AI Security Engineer - Wilson Sonsini Goodrich & Rosati

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.

Wilson Sonsini is looking for a Senior AI Security Engineer to join the Security Operations team. The Senior AI Security Engineer, under the direction of the Director, Security Engineering and Operations, sits at the frontier of AI infrastructure and enterprise security — a rare opportunity to architect how one of the world’s leading law firms builds and deploys AI systems with security and trust at their core. This role is designed for someone who understands how models are attacked and how to harden them, and who is energized by the challenge of securing AI-native workflows in a legal environment. You will own the firm’s AI security engineering function: designing secure AI pipelines, evaluating MCP server integrations and agentic architectures, and serving as the technical authority for AI security across the firm’s growing ecosystem of AI-powered tools and platforms.

This position is available as a fully virtual opportunity.

Essential Duties and Responsibilities:

• Collaborate on designing secure-by-default patterns for LLM integration, agentic workflows, retrieval-augmented generation (RAG) pipelines, and MCP server deployments across firm systems
• Lead security architecture reviews for MCP (Model Context Protocol) integrations — evaluating tool definitions, server trust boundaries, prompt injection attack surfaces, and tool call authorization models before any MCP server is connected to firm data or workflows
• Build and operate AI threat modeling and red teaming capabilities — developing adversarial test suites for prompt injection, jailbreaking, data exfiltration via LLMs, model inversion, and supply chain attacks on AI/ML dependencies
• Engineer secure data pipelines for AI systems — implementing data loss prevention controls, confidentiality boundaries, and least-privilege access patterns for LLMs interacting with firm data
• Partner with IT, Information Security, and practice group leaders to evaluate and approve AI vendor integrations
• Develop and maintain security standards and engineering guardrails for AI development across the firm — including secure coding practices for AI-adjacent code, model output validation, hallucination detection controls, and audit logging for AI-assisted attorney workflows
• Perform related duties as assigned by supervisor
• Maintain c