Engineer, AI Prompt Security

The GCS

• Security Architecture function secures Carnival Corp’s adoption of AI by protecting GenAI and agentic systems at the prompt and tool-invocation layer. This position is a hands-on engineering role centered on scripting, programming, and automation—building the guardrails, detections, evaluation tooling, and reusable libraries that defend large language model and agentic applications against prompt injection, jailbreaks, and tool misuse. The AI Engineer writes the software and automation that ships these protections into CI/CD and engineering workflows and operationalizes findings from the automated AI red-team / security posture platform to reduce risk to Carnival Corp and customer information assets..

• Design, build, and maintain prompt-level security controls and guardrails (LLM firewalls, input/output filtering, jailbreak and prompt-injection defenses) for GenAI and agentic applications.

• Develop scripts, programs, and automation (primarily Python) to operationalize prompt-security controls, detections, and policy enforcement across AI applications.

• Build and maintain automated evaluation harnesses and regression test suites that continuously validate prompt and agent behavior against security policies.

• Integrate prompt-security controls and tests into CI/CD pipelines and engineering workflows so protections ship with every release.

• Build reusable libraries, SDKs, and templates that make secure prompting and safe tool-use the default for engineering teams.

• Enforce identity and PHI/PII/data-protection controls at the prompt and tool-invocation layer, ensuring agents respect least-privilege and data-handling boundaries.

• Define and document secure-prompting and agentic-development best practices, patterns, and anti-patterns, and drive adoption across engineering teams.

• Operationalize findings from the automated AI red-team / security posture platform, translating them into prompt-layer fixes and detections.

• Research and pilot prompt-security and LLM-defense tooling aligned to the NIST AI RMF and OWASP Top 10 for LLM.

• Strong software-engineering fundamentals—scripting, programming, and automation (especially Python)—for building security tooling, guardrails, and evaluation harnesses, with sound practices in version control, testing, and CI/CD. Working knowledge of GenAI/LLM and agentic design patterns and protocols (agents, MCP) and prompt-security concepts (prompt injection, jailbreaks, tool misuse). Working knowledge of Identity and Access Management and data security/privacy controls (PHI/PII, encryption). Applied understanding of the NIST AI RMF and OWASP Top 10 for LLM. Strong written and verbal communication, including explaining AI security risks to non-technical stakeholders.

• Bachelor's degree in Computer Science, Cyber Security, Software Engineering, Artificial Intelligence, or a related field (Master's a plus).

• Strong Python/scripting and general programming ability with sound software-engineering practices (version control, testing, CI/CD). Knowledge of GenAI/LLM and agentic systems, secure MCP configuration, Application/API security, and data protection. Cloud environment (Azure & AWS) security fundamentals.

• 3+ years (mid-level) in software/security engineering, AI/ML, or platform engineering in a large enterprise setting, with a strong track record building automation and tooling.

• Hands-on Python development and CI/CD integration. Identity and Access Management fundamentals. Applied use of the NIST AI RMF and OWASP Top 10 for LLM.

Physical Demands . Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

• Holidays
• All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
• Vacation Time
• All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
• Sick Time
• All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.