Security Engineer, AI Platforms & Infrastructure at Carlyle in New York, NY

Job description

Company Profile The Carlyle Group (NASDAQ: CG) is a global investment firm with $485 billion of assets under management, across 678 investment vehicles as of June 30, 2026. Founded in 1987 in Washington, DC, Carlyle has grown into one of the world's largest and most successful investment firms, with more than 2,500 professionals operating in 28 offices in North America, Europe, the Middle East, Asia and Australia. Carlyle’s purpose is to connect people, ideas, and capital to fuel growth for companies and performance for investors, which range from public and private pension funds to wealthy individuals and families to sovereign wealth funds, unions and corporations. Carlyle invests across three segments – Global Private Equity, Global Credit and Carlyle AlpInvest – and has deep expertise across industries, markets, and geographies. At Carlyle, we believe that a wide spectrum of experiences and viewpoints drives performance and success. Our CEO, Harvey Schwartz, has stated that, "To build better businesses and create value for all of our stakeholders, we are focused on assembling leadership teams with the strongest insights from a range of perspectives." Reflecting this view, emphasis is placed on development, retention and inclusion through our internal processes and seven Employee Resource Groups (ERGs). We cultivate a culture where ideas are openly shared and challenged, connecting diverse expertise and perspectives to drive enduring value. Position Summary The Security Engineer is a hands-on technical role that strengthens how Carlyle secures its adoption of AI. This role secures AI platforms and agentic tooling as they’re adopted across the firm and extends core security engineering practices into the identity, network, and logging capabilities that support them. This role owns the implementation and continuous improvement of security controls protecting AI systems throughout their lifecycle, from onboarding and integration review through ongoing monitoring and retirement and brings strong automation to bear as the firm’s technology footprint evolves. In-Office Requirement: 4 days per week P rimary Responsibilities AI Platforms, Gateway – 30% Secure and operate the AI gateway that brokers access between users, agents, and downstream model providers and connected services, including authentication, authorization, guardrails, and usage governance. Review and harden AI agent and tool integrations for excessive scope, credential handling, and data-exfiltration risk before and after deployment. Define and enforce security guardrails for model inputs, outputs, and tool usage. Partner with platform owners to pilot new guardrail configurations and measure their effectiveness. Automation, Identity & Privileged Access – 25% Build automation using supported APIs, reducing manual and error-prone security operations. Support privileged access management across the environment. Network, Endpoint & Infrastructure Security – 25% Secure network paths across the security stack, including SD-WAN, firewall, SASE/ZTNA, and WAF policies for API and platform traffic. Support broader network and endpoint security engineering work as capacity allows, including firewall migrations, SSL inspection tuning, and device-posture troubleshooting. Logging, Telemetry & Observability – 20% Design and build logging and telemetry infrastructure to support security monitoring across the environment. Evaluate and integate telemetry pipeline technologies to route security logs reliably and cost-effectively to the SIEM. Work with data retention, normalization, and enrichment standards for logs so analysts and automation can act on them; identify and close logging and data-quality gaps. Build dashboards, alerts, and health checks to monitor availability, security posture, performance, and reliability across assigned capabilities. Requirements Education & Certificates Bachelor’s degree, required Concentration in cybersecurity, computer science, information systems,