Job Description
OverviewMedallia is the pioneer and market leader in Experience Management. Our award-winning SaaS platform, Medallia Experience Cloud, leads the market in the management of experiences, insights, and actions for candidates, customers, employees, patients, and residents alike.
We believe that every experience is a memory that can last a lifetime. Experiences shape the way people feel about a company. And they greatly influence how likely people are to advocate, contribute, and stay. At Medallia, we are committed to creating a world where organizations are loved by their customers and their employees.
We empower exceptional people to create extraordinary experiences together.
Bring your whole self.
The Role and Team
Medallia’s security team is responsible for the security of the overall Medallia platform and entire global infrastructure. Medallia leads the federal experience management market, with aggressive plans to grow and expand it into existing and new markets.
We are looking for a seasoned cybersecurity engineer in the AI security space as a Sr. Staff Security Engineer. With the right expertise and experience we will be open to hire in the higher level as well. This person will create and drive the AI Security strategy for both product as well as enterprise use cases. This person will define what awesome security looks like when it comes to building GenAI products and apps. They will also be responsible for defining safe usage of AI products and Apps within Medallia. You will work across the engineering, product, compliance and security operations teams to drive AI security. You will identify key risks and implement innovative solutions to mitigate those risks. This role will be part of the CISO org at Medallia.
Responsibilities - Create AI Security strategy for Medallia
- Identify security risks by conducting threat modelling and implementing industry leading AI frameworks for both Medallia product and corporate use cases.
- Implement innovative tools and solutions to detect, prevent and monitor AI risks.
- Create data protection architecture for AI use cases.
- Engage with product, engineering, compliance and IT teams to ensure we meet the AI governance requirements.
- Create overall AI SDLC/AppSec process that works for the development teams
- Enhance vendor risk assessment to incorporate AI risks.
QualificationsMinimum Qualifications
- 8+ years of experience working within the product security/AppSec/Enterprise security teams for cloud and/or SaaS companies.
- Demonstrated experience with both private and public cloud architectures, including threat modeling
- Demonstrated experience with AI Security risks, frameworks, tools and solutions.
- Demonstrated experience empowering developers to build secured software at scale.
- Demonstrated experience in AI products and services from major CSPs like AWS, GCP, Azure, OpenAI, or OCI.
Preferred Qualifications
- Demonstrated experience with vendor risk assessment for 3rd party SaaS applications and services.
- Proven ability to work collaboratively across and within teams
- The ability to take non technical goals and turn them into technical solutions
- Independent problem-solving capabilities and excellent communication skills
At Medallia, we celebrate diversity and recognize the value it brings to our customers and employees. Medallia is proud to be an equal-opportunity workplace and is an affirmative-action employer. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or any other applicable status protected by state or local law. Individuals with a disability who need an accommodation to apply please contact us at ApplicantAccessibility@medallia.com. For information regarding how Medallia collects and uses personal information, please review our Privacy Policies.