Sr. Staff Vulnerability & AI Security Engineer (Hybrid)

<div class="content-intro"><p><span style="font-weight: 400;">Archer is an aerospace company based in San Jose, California building an all-electric vertical takeoff and landing aircraft with a mission to advance the benefits of sustainable air mobility. We are designing, manufacturing, and operating an all-electric aircraft that can carry four passengers while producing minimal noise.</span></p> <p><span style="font-weight: 400;">Our sights are set high and our problems are hard, and we believe that diversity in the workplace is what makes us smarter, drives better insights, and will ultimately lift us all to success. We are dedicated to cultivating an equitable and inclusive environment that embraces our differences, and supports and celebrates all of our team members.</span></p></div><h2 data-path-to-node="3"> </h2> <h2 data-path-to-node="3"><strong data-path-to-node="3" data-index-in-node="0"><strong data-path-to-node="4" data-index-in-node="17">Sr. Staff Vulnerability AI Security Engineer (Hybrid-San Jose,CA)</strong></strong></h2> <h2 data-path-to-node="3"><strong data-path-to-node="3" data-index-in-node="0">Job Overview</strong></h2> <p data-path-to-node="4">We are seeking a <strong data-path-to-node="4" data-index-in-node="17">Sr. Staff Vulnerability AI Security Engineer</strong> to architect and lead Archer’s enterprise vulnerability management strategy while establishing technical, secure guardrails for AI adoption. Reporting directly to the CISO, you will serve as a <strong data-path-to-node="4" data-index-in-node="257">technical principal</strong> and "player-coach," owning the end-to-end vulnerability lifecycle across cloud, endpoints, applications, and identity.</p> <p data-path-to-node="5">This is a high-influence, high-execution role. You will move between high-level strategy and deep-dive engineering, partnering with teams to drive measurable risk reduction through automation, rigorous prioritization, and disciplined remediation. You will operationalize modern approaches such as attack surface management and AI-assisted detection while ensuring our security posture meets the high bar of aerospace compliance (NIST SP 800-171, CMMC, ITAR).</p> <h2 data-path-to-node="6"><strong data-path-to-node="6" data-index-in-node="0">Key Responsibilities</strong></h2> <ul data-path-to-node="7"> <li> <p data-path-to-node="7,0,0"><strong data-path-to-node="7,0,0" data-index-in-node="0">Architect Enterprise Strategy:</strong> Design and own the end-to-end vulnerability management architecture—from discovery and coverage to automated validation and executive reporting.</p> </li> <li> <p data-path-to-node="7,1,0"><strong data-path-to-node="7,1,0" data-index-in-node="0">Risk-Based Prioritization:</strong> Establish a sophisticated prioritization model that integrates asset criticality, threat intelligence, and exploitability to ensure engineering teams focus on the "critical few" over the "noisy many."</p> </li> <li> <p data-path-to-node="7,2,0"><strong data-path-to-node="7,2,0" data-index-in-node="0">Technical AI Governance:</strong> Lead the technical implementation of AI security; design and deploy guardrails for GenAI usage, detect "Shadow AI," and build technical controls to prevent IP leakage into public LLMs.</p> </li> <li> <p data-path-to-node="7,3,0"><strong data-path-to-node="7,3,0" data-index-in-node="0">Attack Surface Engineering:</strong> Partner with Cloud and Infrastructure teams to integrate CNAPP/CSPM findings and build automated workflows that reduce configuration-driven exposure in AWS/Azure.</p> </li> <li> <p data-path-to-node="7,4,0"><strong data-path-to-node="7,4,0" data-index-in-node="0">Shift-Left Leadership:</strong> Drive DevSecOps excellence by embedding SAST/DAST/SCA and secrets scanning into CI/CD pipelines, preventing vulnerabilities from reaching production.</p> </li> <li> <p data-path-to-node="7,5,0"><strong data-path-to-node="7,5,0" data-index-in-node="0">Metrics Storytelling:</strong> Define and op ... (truncated, view full listing at source)