Job description

WHO WE ARE At Trustly, we're building a smarter, faster, and more secure financial future by revolutionizing the world of payments. As a global leader in Open Banking Payments, we are establishing Pay by Bank as the new standard at checkout, providing unparalleled freedom, speed, and ease to millions of consumers and merchants worldwide. Our Ambition: To build the world's most disruptive payment network and redefine what the payment experience should feel like. Trustly is a global team of innovators, collaborators, and doers. If you are driven by a strong sense of purpose and thrive in a dynamic, entrepreneurial, and high-growth environment, join us and be part of a team that's transforming the way the world pays. ABOUT THE SECURITY & IT TEAM Trustly's Security & IT team protects the integrity, availability, and confidentiality of our systems and data globally — and is at the forefront of securing Trustly's AI-native transformation. As Trustly deploys LLMs, agentic systems, and MCP implementations across its engineering and product organization, the Security team plays a critical and novel role: ensuring these AI systems are built, deployed, and governed safely and in line with Trustly's risk posture. ABOUT THE ROLE As a Staff AI Enablement Security Engineer, you will be one of two senior security ICs specifically aligned to Trustly's AI transformation — focused on securing Claude, MCP implementations, and the broader agentic AI tooling that Trustly is deploying internally and within its products. You'll define the security standards and controls for AI systems, work hands-on with the AI Enablement team to assess and mitigate risk, and build the tooling and frameworks that allow Trustly to move fast with AI without compromising security. WHAT YOU'LL DO - Own security assessment and risk management for Trustly's AI and LLM systems — including Claude, MCP server implementations, agentic workflows, and AI-assisted developer tooling. - Define and implement security controls, access governance, and monitoring frameworks for AI systems — covering prompt injection, data leakage, model misuse, and agentic system abuse scenarios. - Partner closely with the AI Enablement team to embed security from the start of AI feature development — conducting threat modeling, reviewing architectures, and advising on safe deployment patterns. - Build and maintain tooling for AI-specific security monitoring — detecting anomalous model behavior, unauthorized data access, and policy violations in real time. - Develop and maintain AI security standards, guidelines, and training resources for engineering teams across Trustly — making it easy for engineers to build with AI safely. - Stay at the leading edge of AI security research — tracking emerging attack vectors, defensive techniques, and regulatory developments relevant to LLM and agentic system security. WHO YOU ARE - 8+ years of security engineering experience, with at least 2-3 years focused on AI/ML security, LLM security, or security for data-intensive systems. - Deep, hands-on understanding of the AI security threat landscape — prompt injection, jailbreaking, data poisoning, model exfiltration, insecure agentic tool use, and MCP-specific attack surfaces. - Strong security engineering fundamentals — experienced in threat modeling, secure design review, penetration testing, and building security monitoring infrastructure. - Familiarity with MCP (Model Context Protocol) architecture, LLM orchestration frameworks, and agentic AI deployment patterns — you can reason about security at the level of individual tool calls and context windows. - Track record of operating at Staff+ IC scope — driving security decisions that span multiple teams, influencing architecture through technical credibility rather than authority. - Excellent communicator — able to explain novel AI security risks clearly to both technical and non-technical audiences, and to earn trust with engineering teams as a partner rather than a gatekeeper. LOCATION & WORKPLACE This is a hybrid role based in our San Francisco hub. We look for team members to be in the office Tuesday through Thursday. SALARY RANGES IN US-BASED ROLE POSTING Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only and do not include other perks and benefits. WHAT WE OFFER At Trustly, you’ll have the chance to solve meaningful challenges alongside some of the brightest minds in FinTech. Together, we’re shaping the future of payments in an environment that celebrates curiosity, collaboration, and innovation. You'll be challenged and empowered to grow, making a real impact every step of the way. Our team is as diverse as the global footprint we serve, with colleagues across Silicon Valley, the U.S., Canada, Brazil, Europe, and beyond. At Trustly, we foster a workplace where everyone feels they belong—a place where teamwork thrives, ideas flourish, and we never forget to have fun along the way. We offer innovative perks and benefits packages that include: - Flexible paid time off & generous PTO accrual plans - Comprehensive medical, dental, vision, and other insurances - FSA & HSA plans for medical and dependent care - Home office set-up allowance - Internet stipend - Retirement plan match for 401k and RRSP - Gender-neutral paid parental leave, and more! (The benefits and total compensation packages outlined above are for full-time employees; some exclusions apply to temporary positions.) OUR COMMITMENT TO YOU Trustly is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you need assistance or an accommodation due to a disability, you may contact us at hr@trustly.com.

Requirements

Must-haves

Own security assessment and risk management for Trustly's AI and LLM systems — including Claude, MCP server implementations, agentic workflows, and AI-assisted developer tooling.
Define and implement security controls, access governance, and monitoring frameworks for AI systems — covering prompt injection, data leakage, model misuse, and agentic system abuse scenarios.
Partner closely with the AI Enablement team to embed security from the start of AI feature development — conducting threat modeling, reviewing architectures, and advising on safe deployment patterns.
Build and maintain tooling for AI-specific security monitoring — detecting anomalous model behavior, unauthorized data access, and policy violations in real time.
Develop and maintain AI security standards, guidelines, and training resources for engineering teams across Trustly — making it easy for engineers to build with AI safely.
Stay at the leading edge of AI security research — tracking emerging attack vectors, defensive techniques, and regulatory developments relevant to LLM and agentic system security.
8+ years of security engineering experience, with at least 2-3 years focused on AI/ML security, LLM security, or security for data-intensive systems.
Deep, hands-on understanding of the AI security threat landscape — prompt injection, jailbreaking, data poisoning, model exfiltration, insecure agentic tool use, and MCP-specific attack surfaces.
Strong security engineering fundamentals — experienced in threat modeling, secure design review, penetration testing, and building security monitoring infrastructure.
Familiarity with MCP (Model Context Protocol) architecture, LLM orchestration frameworks, and agentic AI deployment patterns — you can reason about security at the level of individual tool calls and context windows.
Track record of operating at Staff+ IC scope — driving security decisions that span multiple teams, influencing architecture through technical credibility rather than authority.
Excellent communicator — able to explain novel AI security risks clearly to both technical and non-technical audiences, and to earn trust with engineering teams as a partner rather than a gatekeeper.
This is a hybrid role based in our San Francisco hub. We look for team members to be in the office Tuesday through Thursday.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aillmml

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Paid Time Off

Parental Leave