Security Engineer, AI Platforms & Infrastructure
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Include a section ONLY when posting has real, specific content for it. So we need sections: About the role (maybe Company Profile + Position Summary?), Responsibilities (Primary Responsibilities), Requirements (Education & Certificates, Professional Experience), Benefits (Benefits/Compensation), Pay (compensation range), Schedule (In-Office Requirement). Also maybe "Qualifications" could be merged with Requirements. But we should not create empty sections.
We need to preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO etc. There's none.
We need to use - for any list of duties/requirements/benefits, and
for prose.
We need to output only HTML fragment, no /, no markdown fences.
Let's structure:
About the role
Company profile summary? Actually we can include company profile as prose. Then Position Summary as prose.
But we must not repeat job title as heading. The job title is "Security Engineer". Not to repeat.
So About the role section can contain company profile and position summary.
We need to keep all details: company profile details: Carlyle Group (NASDAQ: CG) is a global investment firm with $485 billion of assets under management, across 678 investment vehicles as of June 30, 2026. Founded 1987 in Washington, DC, Carlyle has grown into one of the world's largest and most successful investment firms, with more than 2,500 professionals operating in 28 offices in North America, Europe, the Middle East, Asia and Australia. Carlyle's purpose is to connect people, ideas, and capital to fuel growth for companies and performance for investors, which range from public and private pension funds to wealthy individuals and families to sovereign wealth funds, unions and corporations. Carlyle invests across three segments - Global Private Equity, Global Credit and Carlyle AlpInvest - and has deep expertise across industries, markets, and geographies. At Carlyle, we believe that a wide spectrum of experiences and viewpoints drives performance and success. Our CEO, Harvey Schwartz, has stated that, "To build better businesses and create value for all of our stakeholders, we are focused on assembling leadership teams with the strongest insights from a range of perspectives." Reflecting this view, emphasis is placed on development, retention and inclusion through our internal processes and seven Employee Resource Groups (ERGs). We cultivate a culture where ideas are openly shared and challenged, connecting diverse expertise and perspectives to drive enduring value.
Position Summary: The Security Engineer is a hands-on technical role that strengthens how Carlyle secures its adoption of AI. This role secures AI platforms and agentic tooling as they're adopted across the firm and extends core security engineering practices into the identity, network, and logging capabilities that support them. This role owns the implementation and continuous improvement of security controls protecting AI systems throughout their lifecycle, from onboarding and integration review through ongoing monitoring and retirement and brings strong automation to bear as the firm's technology footprint evolves. In-Office Requirement: 4 days per week
We could put In-Office Requirement in Schedule section later.
Now Responsibilities: Primary Responsibilities broken into percentages.
We need to list duties as
- . Each bullet can contain the description.
We have four categories with percentages: AI Platforms, Gateway - 30%; Automation, Identity & Privileged Access - 25%; Network, Endpoint & Infrastructure Security - 25%; Logging, Telemetry & Observability - 20%.
We need to preserve the percentages? Probably include them in bullet text.
Now Requirements: Education & Certificates and Professional Experience.
We can have a Requirements section with subheadings? The instruction only says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid subheadings like ? Not specified. Safer to keep only sections. So we can have Requirements section containing both education and experience as prose or lists.
We need to use - for any list of duties/requirements/benefits. So for requirements we should list each requirement as bullet.
Education & Certificates: Bachelor's degree, required; Concentration in cybersecurity, computer science, information systems, engineering, or a related discipline strongly preferred, or equivalent relevant professional experience. Relevant certifications in security engineering, cloud security, identity, or AI/ML security are preferred.
Professional Experience: Minimum 5-7 years of overall relevant technical experience, required; Minimum 3 years of experience information security or cybersecurity engineering experience, required; Hands-on experience securing platforms and agent or tool-based systems, including authentication, authorization, guardrails, and usage monitoring. Experience with Model Context Protocol (MCP), agent frameworks, tool integrations, or comparable integration patterns, including reviewing third-party integrations for security risk. Experience with privileged access management platforms and secrets management for service accounts and automation. Experience with network security technologies, including next-generation firewalls, SASE/ZTNA, web application firewalls, and modern enterprise networking. Enough Linux administration skills to harden servers and to evaluate AI-generated scripts and configurations across various distributions. Experience building automation with a general-purpose language (Python, Bash, or similar) and integrating systems through APIs and structured data formats. Experience building or operating logging and telemetry pipelines and integrating with SIEM platforms. Experience with identity platforms and endpoint security tooling is preferred.
We need to keep all details.
Now Benefits/Compensation: The compensation range for this role is specific to Washington, DC, and New York, NY and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications. The anticipated base salary range for this role is $160,000 to $180,000. In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs. Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance.
We need separate sections for Pay and Benefits? The instruction says use headings e.g. Benefits, Pay, Schedule. So we should have Pay section for compensation range, Benefits section for benefits package, and Schedule section for In-Office Requirement.
Thus:
Pay
The compensation range for this role is specific to Washington, DC, and New York, NY and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications. The anticipated base salary range for this role is $160,000 to $180,000.
Benefits
- retirement benefits
- health insurance
- life insurance and disability
- paid time off
- paid holidays
- family planning benefits
- various wellness programs
- annual discretionary incentive program (eligibility based on individual and organizational performance)
But we need to preserve the prose about eligibility. Could be a plus list. The instruction: Use
- for any list of duties/requirements/benefits, and
for prose. So we can have a
describing benefits package, then a
for list items. Or we can just list each as - . The phrase "In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs." That's a sentence; we could turn into list. Also "Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance." That could be a separate
- .
Thus Benefits section:
In addition to the base salary, the hired professional will enjoy a comprehensive benefits package.
then with items.
But we need to preserve all substantive information; we can include the description in and then list.
Now Schedule: In-Office Requirement: 4 days per week.
Thus
Schedule
In-office requirement: 4 days per week.
Now we need to ensure we don't repeat job title. Not used.
Now we need to output only HTML fragment.
Let's craft:
About the role
The Carlyle Group (NASDAQ: CG) is a global investment firm with $485 billion of assets under management, across 678 investment vehicles as of June 30, 2026. Founded in 1987 in Washington, DC, Carlyle has grown into one of the world's largest and most successful investment firms, with more than 2,500 professionals operating in 28 offices in North America, Europe, the Middle East, Asia and Australia. Carlyle's purpose is to connect people, ideas, and capital to fuel growth for companies and performance for investors, which range from public and private pension funds to wealthy individuals and families to sovereign wealth funds, unions and corporations. Carlyle invests across three segments - Global Private Equity, Global Credit and Carlyle AlpInvest - and has deep expertise across industries, markets, and geographies. At Carlyle, we believe that a wide spectrum of experiences and viewpoints drives performance and success. Our CEO, Harvey Schwartz, has stated that, "To build better businesses and create value for all of our stakeholders, we are focused on assembling leadership teams with the strongest insights from a range of perspectives." Reflecting this view, emphasis is placed on development, retention and inclusion through our internal processes and seven Employee Resource Groups (ERGs). We cultivate a culture where ideas are openly shared and challenged, connecting diverse expertise and perspectives to drive enduring value.
The Security Engineer is a hands-on technical role that strengthens how Carlyle secures its adoption of AI. This role secures AI platforms and agentic tooling as they're adopted across the firm and extends core security engineering practices into the identity, network, and logging capabilities that support them. This role owns the implementation and continuous improvement of security controls protecting AI systems throughout their lifecycle, from onboarding and integration review through ongoing monitoring and retirement and brings strong automation to bear as the firm's technology footprint evolves.
Responsibilities
- AI Platforms, Gateway - 30%: Secure and operate the AI gateway that brokers access between users, agents, and downstream model providers and connected services, including authentication, authorization, guardrails, and usage governance. Review and harden AI agent and tool integrations for excessive scope, credential handling, and data-exfiltration risk before and after deployment. Define and enforce security guardrails for model inputs, outputs, and tool usage. Partner with platform owners to pilot new guardrail configurations and measure their effectiveness.
- Automation, Identity & Privileged Access - 25%: Build automation using supported APIs, reducing manual and error-prone security operations. Support privileged access management across the environment.
- Network, Endpoint & Infrastructure Security - 25%: Secure network paths across the security stack, including SD-WAN, firewall, SASE/ZT
for prose. We need to output only HTML fragment, no /, no markdown fences. Let's structure:
About the role
Company profile summary? Actually we can include company profile as prose. Then Position Summary as prose. But we must not repeat job title as heading. The job title is "Security Engineer". Not to repeat. So About the role section can contain company profile and position summary. We need to keep all details: company profile details: Carlyle Group (NASDAQ: CG) is a global investment firm with $485 billion of assets under management, across 678 investment vehicles as of June 30, 2026. Founded 1987 in Washington, DC, Carlyle has grown into one of the world's largest and most successful investment firms, with more than 2,500 professionals operating in 28 offices in North America, Europe, the Middle East, Asia and Australia. Carlyle's purpose is to connect people, ideas, and capital to fuel growth for companies and performance for investors, which range from public and private pension funds to wealthy individuals and families to sovereign wealth funds, unions and corporations. Carlyle invests across three segments - Global Private Equity, Global Credit and Carlyle AlpInvest - and has deep expertise across industries, markets, and geographies. At Carlyle, we believe that a wide spectrum of experiences and viewpoints drives performance and success. Our CEO, Harvey Schwartz, has stated that, "To build better businesses and create value for all of our stakeholders, we are focused on assembling leadership teams with the strongest insights from a range of perspectives." Reflecting this view, emphasis is placed on development, retention and inclusion through our internal processes and seven Employee Resource Groups (ERGs). We cultivate a culture where ideas are openly shared and challenged, connecting diverse expertise and perspectives to drive enduring value. Position Summary: The Security Engineer is a hands-on technical role that strengthens how Carlyle secures its adoption of AI. This role secures AI platforms and agentic tooling as they're adopted across the firm and extends core security engineering practices into the identity, network, and logging capabilities that support them. This role owns the implementation and continuous improvement of security controls protecting AI systems throughout their lifecycle, from onboarding and integration review through ongoing monitoring and retirement and brings strong automation to bear as the firm's technology footprint evolves. In-Office Requirement: 4 days per week We could put In-Office Requirement in Schedule section later. Now Responsibilities: Primary Responsibilities broken into percentages. We need to list duties as
- . Each bullet can contain the description.
We have four categories with percentages: AI Platforms, Gateway - 30%; Automation, Identity & Privileged Access - 25%; Network, Endpoint & Infrastructure Security - 25%; Logging, Telemetry & Observability - 20%.
We need to preserve the percentages? Probably include them in bullet text.
Now Requirements: Education & Certificates and Professional Experience.
We can have a Requirements section with subheadings? The instruction only says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid subheadings like
? Not specified. Safer to keep only
sections. So we can have Requirements section containing both education and experience as prose or lists. We need to use
- for any list of duties/requirements/benefits. So for requirements we should list each requirement as bullet.
Education & Certificates: Bachelor's degree, required; Concentration in cybersecurity, computer science, information systems, engineering, or a related discipline strongly preferred, or equivalent relevant professional experience. Relevant certifications in security engineering, cloud security, identity, or AI/ML security are preferred.
Professional Experience: Minimum 5-7 years of overall relevant technical experience, required; Minimum 3 years of experience information security or cybersecurity engineering experience, required; Hands-on experience securing platforms and agent or tool-based systems, including authentication, authorization, guardrails, and usage monitoring. Experience with Model Context Protocol (MCP), agent frameworks, tool integrations, or comparable integration patterns, including reviewing third-party integrations for security risk. Experience with privileged access management platforms and secrets management for service accounts and automation. Experience with network security technologies, including next-generation firewalls, SASE/ZTNA, web application firewalls, and modern enterprise networking. Enough Linux administration skills to harden servers and to evaluate AI-generated scripts and configurations across various distributions. Experience building automation with a general-purpose language (Python, Bash, or similar) and integrating systems through APIs and structured data formats. Experience building or operating logging and telemetry pipelines and integrating with SIEM platforms. Experience with identity platforms and endpoint security tooling is preferred.
We need to keep all details.
Now Benefits/Compensation: The compensation range for this role is specific to Washington, DC, and New York, NY and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications. The anticipated base salary range for this role is $160,000 to $180,000. In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs. Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance.
We need separate sections for Pay and Benefits? The instruction says use headings e.g. Benefits, Pay, Schedule. So we should have Pay section for compensation range, Benefits section for benefits package, and Schedule section for In-Office Requirement.
Thus:
Pay
The compensation range for this role is specific to Washington, DC, and New York, NY and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications. The anticipated base salary range for this role is $160,000 to $180,000.
Benefits
- retirement benefits
- health insurance
- life insurance and disability
- paid time off
- paid holidays
- family planning benefits
- various wellness programs
- annual discretionary incentive program (eligibility based on individual and organizational performance)
plus list. The instruction: Use
- for any list of duties/requirements/benefits, and
for prose. So we can have a
describing benefits package, then a
- for list items. Or we can just list each as
- . The phrase "In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs." That's a sentence; we could turn into list. Also "Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance." That could be a separate
- .
Thus Benefits section:
In addition to the base salary, the hired professional will enjoy a comprehensive benefits package.
then- with items.
But we need to preserve all substantive information; we can include the description in
- AI Platforms, Gateway - 30%: Secure and operate the AI gateway that brokers access between users, agents, and downstream model providers and connected services, including authentication, authorization, guardrails, and usage governance. Review and harden AI agent and tool integrations for excessive scope, credential handling, and data-exfiltration risk before and after deployment. Define and enforce security guardrails for model inputs, outputs, and tool usage. Partner with platform owners to pilot new guardrail configurations and measure their effectiveness.
- Automation, Identity & Privileged Access - 25%: Build automation using supported APIs, reducing manual and error-prone security operations. Support privileged access management across the environment.
- Network, Endpoint & Infrastructure Security - 25%: Secure network paths across the security stack, including SD-WAN, firewall, SASE/ZT
and then list. Now Schedule: In-Office Requirement: 4 days per week. Thus
Schedule
In-office requirement: 4 days per week.
Now we need to ensure we don't repeat job title. Not used. Now we need to output only HTML fragment. Let's craft:About the role
The Carlyle Group (NASDAQ: CG) is a global investment firm with $485 billion of assets under management, across 678 investment vehicles as of June 30, 2026. Founded in 1987 in Washington, DC, Carlyle has grown into one of the world's largest and most successful investment firms, with more than 2,500 professionals operating in 28 offices in North America, Europe, the Middle East, Asia and Australia. Carlyle's purpose is to connect people, ideas, and capital to fuel growth for companies and performance for investors, which range from public and private pension funds to wealthy individuals and families to sovereign wealth funds, unions and corporations. Carlyle invests across three segments - Global Private Equity, Global Credit and Carlyle AlpInvest - and has deep expertise across industries, markets, and geographies. At Carlyle, we believe that a wide spectrum of experiences and viewpoints drives performance and success. Our CEO, Harvey Schwartz, has stated that, "To build better businesses and create value for all of our stakeholders, we are focused on assembling leadership teams with the strongest insights from a range of perspectives." Reflecting this view, emphasis is placed on development, retention and inclusion through our internal processes and seven Employee Resource Groups (ERGs). We cultivate a culture where ideas are openly shared and challenged, connecting diverse expertise and perspectives to drive enduring value.
The Security Engineer is a hands-on technical role that strengthens how Carlyle secures its adoption of AI. This role secures AI platforms and agentic tooling as they're adopted across the firm and extends core security engineering practices into the identity, network, and logging capabilities that support them. This role owns the implementation and continuous improvement of security controls protecting AI systems throughout their lifecycle, from onboarding and integration review through ongoing monitoring and retirement and brings strong automation to bear as the firm's technology footprint evolves.
Responsibilities
- for any list of duties/requirements/benefits. So for requirements we should list each requirement as bullet.
Education & Certificates: Bachelor's degree, required; Concentration in cybersecurity, computer science, information systems, engineering, or a related discipline strongly preferred, or equivalent relevant professional experience. Relevant certifications in security engineering, cloud security, identity, or AI/ML security are preferred.
Professional Experience: Minimum 5-7 years of overall relevant technical experience, required; Minimum 3 years of experience information security or cybersecurity engineering experience, required; Hands-on experience securing platforms and agent or tool-based systems, including authentication, authorization, guardrails, and usage monitoring. Experience with Model Context Protocol (MCP), agent frameworks, tool integrations, or comparable integration patterns, including reviewing third-party integrations for security risk. Experience with privileged access management platforms and secrets management for service accounts and automation. Experience with network security technologies, including next-generation firewalls, SASE/ZTNA, web application firewalls, and modern enterprise networking. Enough Linux administration skills to harden servers and to evaluate AI-generated scripts and configurations across various distributions. Experience building automation with a general-purpose language (Python, Bash, or similar) and integrating systems through APIs and structured data formats. Experience building or operating logging and telemetry pipelines and integrating with SIEM platforms. Experience with identity platforms and endpoint security tooling is preferred.
We need to keep all details.
Now Benefits/Compensation: The compensation range for this role is specific to Washington, DC, and New York, NY and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications. The anticipated base salary range for this role is $160,000 to $180,000. In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs. Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance.
We need separate sections for Pay and Benefits? The instruction says use headings e.g. Benefits, Pay, Schedule. So we should have Pay section for compensation range, Benefits section for benefits package, and Schedule section for In-Office Requirement.
Thus: