AI Enterprise Security Engineer

Docusign is a company providing intelligent agreement management and e-signature solutions. The AI Enterprise Security Engineer will evaluate AI tools and agentic systems, deploy and test security guardrails, support security operations automation, and contribute to AI risk assessments. This entry-level individual contributor will collaborate with security, engineering, Legal, Privacy, and GRC teams to reduce enterprise AI risk.

What you'll do:

• Support deployment, configuration, and testing of AI guardrails across internal and external AI applications, including prompt injection and output filtering controls
• Review and evaluate new AI tools, MCP (Model Context Protocol) servers, and agentic workflows for security risk before enterprise deployment, maintaining documentation of findings and recommendations
• Build and maintain automation scripts and agent-assisted tooling to support security operations, including CSIRT incident response workflows and security monitoring pipelines
• Contribute to AI security consultations with engineering teams, assisting with threat models for new AI-powered features and tools
• Monitor and track the enterprise AI threat landscape including prompt injection techniques, data poisoning, agentic misuse, and model supply chain vulnerabilities
• Support identification and mitigation of Shadow AI risk, contributing to the approved AI vendor review process and usage policy enforcement
• Assist with development and maintenance of AI security documentation including standards, runbooks, and training materials aligned to team frameworks
• Collaborate across the Security organization to provide subject matter support on AI-specific risk topics, including cross-functional engagements with Legal, Privacy, and GRC

What they're looking for:

• Bachelor's degree in Computer Science, Information Security, Data Science, or a related field, or equivalent work experience
• Experience with AI security concepts including prompt injection, indirect prompt injection, data poisoning, agentic threat vectors, and model supply chain risk
• Experience with programming or scripting (Python, JavaScript, or similar) for automation, tooling, or data analysis
• Access to an office location is required
• Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship
• Hands-on experience working with enterprise AI tools, LLM APIs, MCP servers, or agentic AI frameworks
• Familiarity with AI and security standards frameworks including NIST AI RMF, OWASP Top 10 for LLMs, ISO 42001, MITRE ATLAS, or the EU AI Act
• Experience with enterprise security platforms such as Wiz, Cortex XDR, Zscaler, or similar tooling
• Exposure to CSIRT, security operations, or incident response workflows; experience building automation to support security teams
• Experience reviewing or producing AI-related governance artifacts such as data flow diagrams, threat models, or risk assessments
• Comfort building or prompting AI-based tools to accelerate security workflows (e.g., agentic automation, scripted guardrail testing)
• Passion for working in an emerging, rapidly evolving domain where the playbook is still being written

Benefits:

• Non-Sales roles are eligible for a company bonus plan, which is calculated as a percentage of eligible wages and dependent on company performance.
• Hybrid: Employee divides their time between in-office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in-office expectation)
• Paid Time Off: earned time off, as well as paid company holidays based on region
• Paid Parental Leave: take up to six months off with your child after birth, adoption or foster care placement
• Full Health Benefits Plans: options for 100% employer paid and minimum employee contribution health plans from day one of employment
• Retirement Plans: select retirement and pension programs with potential for employer contributions
• Learning and Development: options for coaching, online courses and education reimbursements
• Compassionate Care Leave: paid time off following the loss of a loved one and other life-changing events