Senior Security Engineer, Corporate AI Security (Hybrid)

Hi, Future Homie!

At Homebase, you’ll join a team that’s bold, fast-moving, and obsessed with helping small businesses thrive. We build with empathy, act with urgency, and take big swings that drive real-world impact. Here, every Homie shows up to raise the bar, support one another, and celebrate wins as a team.

We’re not just building an app—we’re building unstoppable teams. So what do you say, are you in?

 📍Your Impact Starts Here

We're looking for a Senior Corporate AI Security Engineer who's passionate about enabling secure AI innovation at scale. You'll pioneer AI security at Homebase, building the frameworks and controls that allow teams to leverage cutting-edge AI technology from generative AI tools to MCP deployments while protecting sensitive data and maintaining compliance. This is a ground-floor opportunity to define and own AI security architecture, working at the intersection of emerging AI technology and corporate security to enable teams to innovate confidently internally.

Note: This role is focused on internal AI tooling and operations security, not product-facing AI features.

These are the key ways you'll contribute and create impact in this role:

• Design and implement security standards for internal AI tools, APIs, model integrations, and AI lifecycle management that enable safe, scalable AI adoption across Homebase.

• Establish governance frameworks for internal AI agent deployment, training data handling, and inference operations that balance security rigor with business enablement.

• Monitor and secure MCP (Model Context Protocol) server deployments with continuous verification and audit trails, establishing a zero-trust architecture for internal AI interactions.

• Architect identity and access management for AI agents, automation tools, and machine-to-machine services, implementing least privilege principles for non-human identities.

• Implement DLP and policy enforcement for internal and third-party AI tools (ChatGPT, Claude, Gemini, etc.) to safeguard sensitive data during prompt exchanges and model training.

• Build privacy-preserving data handling frameworks to prevent exfiltration and intellectual property exposure through AI pipelines.

• Partner with each internal security domain (AppSec, Detection, GRC, and Infrastructure Security) to identify repetitive patterns and manual tasks, then increase team velocity by collaborating to automate security processes using AI and modern tooling.

• Drive alignment with emerging AI governance regulations, ensuring SOC 2 readiness for AI-enabled systems.

• Evaluate new AI tools through comprehensive risk assessment and procurement review, streamlining secure adoption processes.

• Partner with AI enablement, data science, IT, and all of the internal security team members to enable secure AI enablement within Homebase.

• Automate security processes and provide guidance on AI risks to technical and business stakeholders, helping every team adopt AI safely and confidently.

🚀 The Foundation for Success - These are the experiences and strengths that will set you up for success in this role:

• 5+ years of experience in security engineering, with 2+ years focused on AI/ML security, MCP, and automation in the security context

• Deep understanding of AI/ML architectures, including LLMs, model deployment pipelines, and API integrations

• Hands-on experience with identity and access management (IAM), particularly for machine-to-machine authentication and non-human identities

• Strong knowledge of data protection principles, including DLP, encryption, and privacy-preserving technologies

• Experience implementing zero-trust architecture and least privilege access controls

• Familiarity with AI security frameworks such as NIST AI RMF, OWASP ML Top 10, or MITRE ATLAS

• Proficiency in security automation using Python, Ruby, or similar languages

• Strategic thinker who can balance security rigor with business enablement, with strong communication skills to explain complex AI security concepts to technical and non-technical audiences

• Self-starter who thrives in ambiguous, fast-moving environments with a passion for emerging technologies and AI innovation

• Collaborative mindset with experience influencing cross-functional teams and enabling secure innovation

• Influences internal employees and teams on secure AI practices, and the secure path should be the easy path

• Experience with MCP (Model Context Protocol) or similar AI agent frameworks

• Experience building security controls for generative AI tools in corporate environments (preferred)

• Experience with security research and contributing to the AI security community (preferred)

🤝 The Homie Way - These principles guide everything we do—from how we work and make decisions to how we show up for each other.

• 💡 Be Customer Obsessed – Solve problems with empathy and creativity.

• ⚡ Move Fast, Learn Fast – Experiment, take action, and grow every day.

• 🎯 Own Your Impact – Think big, focus on what matters, and make decisions you stand behind.

• 🏆 Master Your Craft – Excellence fuels impact—show up, step up, and make your mark.

• 🏅 Win Together – Put goals over roles, lead with trust, and connect to our mission and each other.

What We Offer

• 💰 Ownership & Savings: Stock options + TFSA/RRSP with 4% company match

• 🏥 Health & Wellness: Comprehensive medical, dental, and vision for you and your dependents

• ⏰ Time Flexibility: Flex time off + company holidays + designated focus periods

• 👶 Family Support: Maternity/Parental Leave EI top-up support offered (after 6 months of service)

• 🌟 Work Your Way: Work From Anywhere Month + meeting-free weeks yearly

• 🛡️ Protection Plans: Life insurance + short/long-term disability coverage

• 🍽️ Workspace Perks: Meals provided, team offsites, and Customer Days

• 💼 Our Hybrid Rhythm: We believe collaboration drives impact. That’s why Tuesdays and Wednesdays are our required in-office days—a time to move faster as a team, build deeper connections, make better decisions, and build together.

What to Expect During the Interview Process

• Meet the Talent Acquisition team, Mavel W.

• Meet the Hiring Manager, Ali F.

• Participate in a Talent Showcase

• Meet Cross-functional Partners

• Background Check + Offer Stage

• Welcome to the team, Homie 🎉

💜 Belonging at Homebase - We're committed to fostering a welcoming space where every Homie can be their full self. Experience comes in many forms—so if you're excited about this role, even if you don’t meet 100% of the qualifications, we encourage you to apply! 

Homebase will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance.

👋 Hey, We’re Homebase

Unstoppable teams start here.

Homebase is the everything app for hourly teams—built to simplify the day-to-day and superpower local businesses. With tools for scheduling, time clocks, payroll, communication, HR, and more, we help teams stay connected and in control. Today, over 100,000 small (but mighty) businesses rely on us to make work radically easier. Together, we’ve tracked over a billion hours for 2.5+ million workers—and we’re just getting started.

At Homebase, we celebrate diversity and are proud to be an equal opportunity employer. We welcome all candidates and do not discriminate based on any legally protected status. If you need accommodations during the hiring process, please let us know—we’re committed to ensuring fair and equitable access for all.