Senior Security Engineer, AI Enablement

JLL empowers you to shape a brighter way .   Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong.  Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.    The Senior Security Engineer, AI Enablement is Security's embedded, full-time representative on JLL's Falcon team, owning the product's security architecture for agents, MCP integrations, and identity end-to-end rather than reviewing it after the fact—advancing APEX + 2030's mandate that AI products are built securely by design, not secured after launch. Reporting to the Head of AI Security while sitting day-to-day with Falcon's engineers, this role requires the technical depth to write and review production code, architect agentic identity and permissioning, and represent Falcon's security posture credibly to the broader Cybersecurity organization.

Embedded Product Security Partnership   Sit inside the Falcon team as security's full-time technical representative, participating in planning, design reviews, and sprint work rather than reviewing finished features after the fact.   Serve as the primary point of contact between Falcon and the broader Cybersecurity organization—translating security requirements into product decisions the team can act on immediately.   Build enough trust and technical credibility with Falcon's engineers that security is treated as a design input, not a release gate.   Agent, MCP & Identity Architecture   Own the security architecture for Falcon's use of agents, MCP servers, and tool integrations, defining permission boundaries, trust boundaries, and blast radius for every agent-to-tool and agent-to-agent interaction.   Review and harden the identity model underpinning Falcon's agentic components, including:   Service-to-service and agent-to-tool authentication   Scoped, least-privilege credentials for every MCP server and tool connection   Session and delegation boundaries when agents act on a user's behalf   Audit logging sufficient to reconstruct what an agent did and why   Design secure patterns for prompt handling, tool-calling, and data flow specific to Falcon's product surface, informed by how the Claude Agent SDK and MCP actually work under the hood.   Partner with the Head of AI Security to align Falcon's architecture with enterprise AI security standards without slowing product velocity.   Product Enablement Ownership   Own the security component of Falcon's product enablement work end-to-end, from threat modeling new features to defining the guardrails that ship with them.   Write and maintain the security requirements, configuration standards, and secure-by-default patterns that Falcon's engineers build against, rather than producing a review checklist after the fact.   Define what "secure enough to ship" means for each Falcon release—balancing genuine risk against the team's delivery timeline.   Cross-Functional Technical Input   Represent Falcon's security posture and roadmap to the broader Cybersecurity organization, including the Head of AI Security and other AI Security team members.   Provide deep technical input into cross-functional security discussions, including third-party risk assessments and enterprise AI governance decisions where Falcon's architecture is relevant.   Collaborate with identity, cloud security, and application security teams to ensure Falcon's agentic components meet the same bar as any other production system.   Software Engineering Craft & Technical Depth   Write and review code directly, contributing to Falcon's