---
title: 'AI Security Engineer, Defensive Automation at Norm Ai'
canonical: 'https://feeny.ai/job/ai-security-engineer-defensive-automation-norm-ai-washington-v85m5s6gegq6'
type: 'job'
last_seen: '2026-11-08'
---

# AI Security Engineer, Defensive Automation at Norm Ai

- **Company:** Norm Ai
- **Location:** Washington, DC
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-11-02
- **Last confirmed live:** 2026-11-08
- **Apply:** https://jobs.ashbyhq.com/norm/f8363384-d2c6-41c9-870b-56f04387e930

## Job description

## About Norm

Norm builds AI-native professional services firms and the technology that powers them. Our mission is to help expert professionals deliver better work at greater scale. Developing the technology and the firms together lets us rethink how work gets done, how teams operate and what clients can expect. Professional judgment and experience guide what we build, while advances in the technology expand what our firms can deliver. Our shared agentic platform connects that progress across teams and services. Founded in 2023, Norm brings together experts across engineering, research, product, design and professional practice. Our legal and compliance platform serves institutions representing more than $35 trillion in combined assets under management. Norm also powers Norm Law, LLP, an affiliated AI-native law firm whose attorneys advise leading institutions on complex corporate matters.

AI Fluency: Norm prefers all team members to be fluent in AI. Successful candidates actively use AI in their day-to-day work to support thinking, creation, and problem-solving. They use it to improve the quality and speed of their work and to continuously refine how work gets done end-to-end.

Candidates should be prepared to demonstrate and discuss their AI usage throughout the interview process, including concrete examples of tools, workflows, and outcomes. We look for practical, hands-on experience, not theoretical familiarity. This Role: We’re hiring Senior AI Security Engineers to build automated, AI-driven systems that find, prioritize, and fix security weaknesses faster than attackers can exploit them. You’ll work across the full lifecycle, from discovery and threat modeling through remediation and response, and go deep in either offensive research or defensive operations based on your strengths. You’ll report to the Chief Security Officer and work closely with Engineering.

What You’ll Do:

Across the Role

- Build defensive automation: Design, build, and improve AI-driven security tooling, with the testing, safeguards, and human oversight you’d expect of production systems.
- Threat-model: Assess new and existing systems for risk, and use those models to decide where detection and remediation effort goes.
- Respond to incidents: Join the response rotation for critical vulnerabilities and security events, from assessing exposure through remediation.
- Measure and communicate: Track how well our security work is performing, and explain risks and tradeoffs clearly to technical and non-technical audiences.

Research Focus

- Find unknown weaknesses: Proactively hunt for previously unknown weaknesses using both automated and manual techniques, in a safe and controlled way.
- Validate findings: Confirm and reproduce findings, and feed what you learn back into the automation to make it better.

Operations Focus

- Run vulnerability management at scale: Triage, prioritize, and remediate vulnerabilities, automating as much of the process as you can.
- Turn threat information into priorities: Bring threat intelligence and external advisories into decisions about what gets fixed first.

What We’re Looking For:

Core Qualifications

- 5+ years of experience in application security and cloud security fundamentals
- Strong software engineering skills, with production code in at least one modern language (ideally Python)
- Hands-on experience building with LLMs or AI agents
- Experience running threat models
- Calm, structured judgment during incidents

Deep Expertise in at Least One Area

- Research: Vulnerability research, offensive security or red teaming, exploit development, CVE credits, or bug bounty work
- Operations: Vulnerability management at scale, detection and response, security automation, or software supply-chain security

Nice to Haves

- Threat intelligence experience
- Experience in highly regulated industries
- Experience securing multi-tenant SaaS

Compensation and Benefits:

Base Salary: $155,000 to $215,000 per year The range displayed in this job posting reflects the minimum and maximum target for new hire salary for this position. Within the range, individual pay is determined by various factors, including job-related skills, experience, and relevant education or training. Equity: Included Benefits: 401(k) with employer match, health, dental, vision coverage, unlimited paid time off, free lunch in office daily, employee referral bonus program Relocation: Financial support to ease your move to New York City, designed to make the transition smooth and stress-free. Location / Office Requirement: Washington, DC (preferred), New York City Work model: Hybrid Travel expectation: Travel to NYC headquarters at least once per quarter To learn more about Norm, visit our [website](https://www.norm.ai).

## About Norm Ai

## Company Overview
- **One-liner**: Norm Ai builds Legal & Compliance AI agents that automate regulatory and compliance tasks by embedding law directly into AI systems.
- **Entity Type**: Private (Private Equity-backed)
- **Headquarters**: New York, New York, USA (7 World Trade Center, 39th Floor)
- **Founded**: 2023
- **Founders**: John Nay (CEO)

## Core Business
- **Primary industry/industries**: Legal Technology, Regulatory Compliance, Artificial Intelligence
- **Target customers**: Large financial institutions, asset managers, and enterprises in regulated sectors (finance, healthcare, legal). Clients include firms with a combined $20+ trillion in assets under management.
- **Mission or purpose statement**: To make compliance advice abundant and set the norms for an agentic implementation of law and policy.

## Products & Services
- **Norm Ai Platform (Regulatory AI)**: AI agents that automate compliance tasks such as risk identification, compliance checks, and regulatory report generation, while adhering to legal and regulatory requirements.
- **Supervisory AI**: A verification and oversight layer for every AI agent operating under law, ensuring compliance and governance.
- **Norm Law**: The world's first fully AI-native law firm for global institutional clients, launched in early 2026.
- **Legal AGI Lab**: The R&D arm (launched April 2026 at Stanford FutureLaw) advancing Legal AGI and the science of AI agents governed by human law.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed.
- **Total Funding**: $136.1M raised to date.
- **Key Funding Rounds**:
  - January 2025: $48M raised from Vanguard, Blackstone, Bain Capital, Citi, TIAA, and Coatue.
  - Early 2026: Additional $50M investment from Blackstone alongside the launch of Norm Law.
- **Notable Investors/Partners**: Blackstone, Coatue, Citi Ventures, Vanguard, Bain Capital, TIAA, New York Life Ventures.
- **Growth Signals**: 
  - Trusted by institutions managing over $30T in combined assets.
  - Client base includes firms with a combined $20 trillion in assets under management.
  - 99 total employees as of mid-2026.
  - Founded in 2023 and already raised $136M+.
  - High-profile hires: Mike Schmidtberger (former Chairman of Sidley Austin) joined as Chairman of Norm Law in January 2026.
  - Senior policy advisors include Susan Dudley (former White House Regulatory Czar) and Troy Paredes (former SEC Commissioner).

## Competitive Advantages
- **First-mover in "Agentic Law"**: Pioneered the concept of embedding legal rules directly into AI agents, creating a defensible position in a nascent category.
- **Institutional Trust**: Backed by and serving the world's largest asset managers, providing a powerful network effect and credibility.
- **Dual Structure (AI + Law Firm)**: Operates both a technology company (Norm Ai) and an affiliated AI-native law firm (Norm Law), allowing it to practice law directly and encode legal judgment.
- **Supervisory AI Moat**: A verification layer that governs AI agents under law, addressing the critical societal-AI alignment problem.
- **Talent Network**: Engineers from Palantir, Google, Stripe, Meta, AWS; Legal Engineers from Harvard Law, Stanford Law, Yale Law, top law firms, and regulators.

## Strategic Focus
- **Scaling Agentic Law**: Expanding the deployment of Regulatory AI agents across the largest financial institutions globally.
- **Building the Legal AGI Lab**: Advancing long-term R&D toward Artificial General Intelligence for legal reasoning.
- **Growing Norm Law**: Recruiting world-class law firm partners and scaling the AI-native law firm for institutional clients.
- **Policy Leadership**: Convening regulators and industry leaders (e.g., U.S. Senators, SEC commissioners) to shape the norms for AI governance.

## Why Work Here
- **Mission-driven**: Work on the societal-AI alignment problem by embedding democratically-determined law into AI systems.
- **High-impact environment**: Fast-paced learning alongside experts at the intersection of law, AI, and technology.
- **Talent density**: Colleagues from top tech companies (Palantir, Google, Stripe) and top law schools/firms.
- **Compensation**: Competitive salary and equity, 401(k) with employer matching, paid parental leave, premium healthcare.
- **Work model**: Hybrid (employees work from physical offices in NYC at the World Trade Center). Relocation reimbursement available.
- **Culture**: High ownership and high trust environment. Free daily lunches, snacks, and drinks in-office. State bar fee reimbursement for legal professionals.
- **Career growth**: Opportunity to define a new category ("Legal Engineering") and work on cutting-edge AI deployment.

## Sources
1. [norm.ai](https://www.norm.ai/)
2. [norm.ai/company](https://www.norm.ai/company)
3. [norm.ai/careers](https://www.norm.ai/careers)
4. [builtin.com](https://builtin.com/company/norm-ai)
5. [cbinsights.com](https://www.cbinsights.com/company/norm-ai)

## Other roles at Norm Ai

- [Member of the Technical Staff](https://feeny.ai/job/member-of-the-technical-staff-norm-ai-new-york-gyrvbwy8wrct) — New York, NY
- [Legal Operations Manager](https://feeny.ai/job/legal-operations-manager-norm-ai-new-york-sc8450870d84) — New York, NY
- [Associate - Tax](https://feeny.ai/job/associate-tax-norm-ai-new-york-xbkrz7j0zhta) — New York, NY
- [Associate - Technology Transactions](https://feeny.ai/job/associate-technology-transactions-norm-ai-new-york-fx09f97w0ymv) — New York, NY
- [Director of PR & Communications](https://feeny.ai/job/director-of-pr-communications-norm-ai-new-york-4qe3kf0sbwc3) — New York, NY
- [Technology Support Specialist](https://feeny.ai/job/technology-support-specialist-norm-ai-new-york-1h9r7ntb7p76) — New York, NY
- [Talent Acquisition Partner](https://feeny.ai/job/talent-acquisition-partner-norm-ai-new-york-31rwc1x73ap1) — New York, NY
- [Junior Counsel](https://feeny.ai/job/junior-counsel-norm-ai-new-york-9z07er5r1a2v) — New York, NY
- [Legal Operations Specialist](https://feeny.ai/job/legal-operations-specialist-norm-ai-new-york-be0fy2hntmq8) — New York, NY
- [Executive Assistant](https://feeny.ai/job/executive-assistant-norm-ai-washington-p72qt5q7hhk1) — Washington, DC