As our Staff Engineer (AI Security), your mission is to define and implement the security strategy for AI agents, chatbots, LLM models, and agentic workflows developed internally or deployed through cloud-based platforms. You will secure AI from idea to production: covering development standards, model security, pre-deployment security checks, identity and access controls, logging, monitoring, alerting, and continuous testing. You will help the organization adopt AI safely by ensuring that every AI agent, chatbot, and LLM-based solution has clear ownership, a defined identity, appropriate permissions, proper monitoring, and security controls that match its risk

Your Mission

• A key part of your mission will be to protect the business from emerging AI-specific threats such as prompt injection, model misuse, model manipulation, excessive permissions, data leakage, insecure tool use, unauthorised agent actions, and misuse of externally facing AI services:
• You will establish the practical security controls needed to govern AI agents, chatbots, LLM models, and agentic workflows. This includes defining ownership, risk classification, approval processes, minimum security requirements, and maintaining visibility over agents, models, data access, identities, permissions, integrations, and exposure levels
• You will partner with engineering, data, cloud, and product teams to embed security into AI delivery. This includes security reviews before deployment, threat modeling, model and prompt security checks, access reviews, data leakage testing, secure architecture guidance, and validation of high-risk components such as APIs, tools, memory, RAG, vector databases, and model-serving environments
• You will build the operational security layer for AI systems already in production. This includes logging requirements, clear separation of human and agent activity, SOC/SIEM integration, alerting for elevated permissions or suspicious behavior, monitoring for model abuse and access drift, and continuous testing of externally facing agents against prompt injection, jailbreaks, data leakage, and other AI-specific attacks

Your story

• You bring solid hands-on experience in AI security, with a strong understanding of how to secure AI agents, chatbots, LLM-based applications, model-serving environments, and agentic workflows in production. You have practical experience assessing AI-specific risks such as prompt injection, jailbreaks, data leakage, insecure tool use, excessive agency, model misuse, model extraction, insecure output handling, and abuse of externally facing AI systems
• You are a senior individual contributor who can operate independently, set direction, and turn emerging AI security risks into practical controls, patterns, and engineering requirements. You have strong experience across application security, cloud security, identity and access management, secure software delivery, APIs, secrets management, logging, monitoring, and security testing
• You are comfortable partnering directly with engineering, data, ML, cloud, IAM, SOC, and product teams to embed security into the AI lifecycle from design through production. Experience with AI red teaming, adversarial testing, SIEM detection use cases, incident response, MLOps/DevSecOps, OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, or similar AI security frameworks would be a strong advantage

As a leading running brand, On’s technology division operates in a dynamic, fast-paced environment and plays a critical role in enabling innovation across the business. As AI adoption accelerates and to enable this safety and at scale, we are creating a dedicated senior AI Security role within the Information Security team to shape how we securely design, deploy, and operate AI agents, chatbots, LLM-based applications, and agentic workflows across local and cloud environments. You will protect the company’s AI ecosystem by defining practical security controls, embedding security into AI delivery, and ensuring AI systems are monitored, tested, and operated safely. Working closely with Engineering, Data, Product, Cloud, IAM, and Cyber Defence, you will focus on LLM model security, agent identity and permissions, pre-deployment security checks, AI-specific monitoring and alerting, and continuous testing of externally facing agents against prompt injection, jailbreaks, data leakage, and other emerging AI threats

Just by the banks of the Limmat you’ll find our largest global hub in Zürich West – On Labs – where you can hike up 12 floors through our custom-built spiral trail

What we offer

• On is a place that is centered around growth and progress. We offer an environment designed to give people the tools to develop holistically – to stay active, to learn, explore and innovate. Our distinctive approach combines a supportive, team-oriented atmosphere, with access to personal self-care for both physical and mental well-being, so each person is led by purpose
• On is an Equal Opportunity Employer. We are committed to creating a work environment that is fair and inclusive, where all decisions related to recruitment, advancement, and retention are free of discrimination
• Our full process can last about eight weeks from application to offer, because we care about getting it right. These steps explain how we usually do things

Ready to dig into the details?This second interview will be held with your future manager and will focus on the specifics of the job. Together you’ll delve into your unique skills and experiences and how they could be relevant at On. It's also a time to assess how you might feel working side-by-side. Bring any questions you have about the job, the team or anything else you might like to know – this is an open forum

Are we a good fit?We’ll get together internally to share our feedback and decide if we’re a match. We know that job searching is a big time investment, so it’s not a decision we take lightly. It’s also time for you to reflect on the experience – are we the right place for you?No matter the outcome, we’ll give you meaningful feedback

You'll start by submitting your application to a specific role