AI Security Engineer at MetLife
Cary, NC
$120,000–$180,000from the description
Jul 10, 2026
Cary, NC
Jul 21, 2026
What this job asks for AI summary
A senior individual contributor role focused on engineering and operationalizing security controls specifically for AI systems across a large enterprise. Day-to-day work spans hardening cloud-native and Kubernetes-based AI hosting environments, building prompt protection and data security controls, improving detection and monitoring for AI platforms, and collaborating with cloud, application, and ML engineering teams. Suits an experienced security or platform engineer with hands-on AI/ML and cloud security knowledge.
Senior level · 5+ years · New York-Newark-Jersey City, NY-NJ-PA · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 3 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 130 people in the New York-Newark-Jersey City, NY-NJ-PA area plausibly meet what this posting asks for (information security analysts). range 25–200
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $143,559 (middle half $110,181–$179,574). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (6)
This role sits at the intersection of security engineering and software/platform engineering — it involves hands-on building of security controls, automation, and tooling for AI systems, which gives it a meaningful 15-1252 (Software Developers) character. 15-1212 (Information Security Analysts) was chosen because the primary framing is securing AI systems, evaluating risk, and enforcing policy, rather than shipping a product.
Location is listed as hybrid (3 days/week in office) but no specific city is named in the posting. MetLife's primary US headquarters is in New York City; the CBSA has been set accordingly, but the actual office location may differ.
The Required Qualifications use 'one or more of the following' constructs throughout, meaning candidates are not expected to hold every listed sub-skill — only demonstrated depth in at least one area per cluster. Skills within each cluster (e.g. IAM, network segmentation, encryption, secrets management) are listed as individual required skills reflecting the overall hard gate on cloud security knowledge, but a candidate lacking any single one would not necessarily be rejected.
Certifications (CCSP, SC-100, CKA/CKS, AI-900) are explicitly listed under 'Preferred Qualifications' and are not hard gates.
Preferred Qualifications items (SBOM/supply chain signing, vector databases, RAG systems, AI gateways, detection engineering) appear under the 'Preferred Qualifications' heading and are not hard gates.
Ignored 3 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): OWASP Top 10 for LLM Applications, secrets management, detection engineering.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.