As our Staff Engineer (AI Security), your mission is to define and implement the security strategy for AI agents, chatbots, LLM models, and agentic workflows developed internally or deployed through cloud-based platforms. You will secure AI from idea to production: covering development standards, model security, pre-deployment security checks, identity and access controls, logging, monitoring, alerting, and continuous testing. You will help the organization adopt AI safely by ensuring that every AI agent, chatbot, and LLM-based solution has clear ownership, a defined identity, appropriate permissions, proper monitoring, and security controls that match its risk.

A key part of your mission will be to protect the business from emerging AI-specific threats such as prompt injection, model misuse, model manipulation, excessive permissions, data leakage, insecure tool use, unauthorised agent actions, and misuse of externally facing AI services:

• You will establish the practical security controls needed to govern AI agents, chatbots, LLM models, and agentic workflows. This includes defining ownership, risk classification, approval processes, minimum security requirements, and maintaining visibility over agents, models, data access, identities, permissions, integrations, and exposure levels.
• You will partner with engineering, data, cloud, and product teams to embed security into AI delivery. This includes security reviews before deployment, threat modeling, model and prompt security checks, access reviews, data leakage testing, secure architecture guidance, and validation of high-risk components such as APIs, tools, memory, RAG, vector databases, and model-serving environments.
• You will build the operational security layer for AI systems already in production. This includes logging requirements, clear separation of human and agent activity, SOC/SIEM integration, alerting for elevated permissions or suspicious behavior, monitoring for model abuse and access drift, and continuous testing of externally facing agents against prompt injection, jailbreaks, data leakage, and other AI-specific attacks.

• You bring solid hands-on experience in AI security, with a strong understanding of how to secure AI agents, chatbots, LLM-based applications, model-serving environments, and agentic workflows in production. You have practical experience assessing AI-specific risks such as prompt injection, jailbreaks, data leakage, insecure tool use, excessive agency, model misuse, model extraction, insecure output handling, and abuse of externally facing AI systems.
• You are a senior individual contributor who can operate independently, set direction, and turn emerging AI security risks into practical controls, patterns, and engineering requirements. You have strong experience across application security, cloud security, identity and access management, secure software delivery, APIs, secrets management, logging, monitoring, and security testing.
• You are comfortable partnering directly with engineering, data, ML, cloud, IAM, SOC, and product teams to embed security into the AI lifecycle from design through production. Experience with AI red teaming, adversarial testing, SIEM detection use cases, incident response, MLOps/DevSecOps, OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, or similar AI security frameworks would be a strong advantage.

As a leading running brand, On’s technology division operates in a dynamic, fast-paced environment and plays a critical role in enabling innovation across the business. As AI adoption accelerates and to enable this safety and at scale, we are creating a dedicated senior AI Security role within the Information Security team to shape how we securely design, deploy, and operate AI agents, chatbots, LLM-based applications, and agentic workflows across local and cloud environments. You will protect the company’s AI ecosystem by defining practical security controls, embedding security into AI delivery, and ensuring AI systems are monitored, tested, and operated safely. Working closely with Engineering, Data, Product, Cloud, IAM, and Cyber Defence, you will focus on LLM model security, agent identity and permissions, pre-deployment security checks, AI-specific monitoring and alerting, and continuous testing of externally facing agents against prompt injection, jailbreaks, data leakage, and other emerging AI threats.

Zürich

On is a place that is centered around growth and progress. We offer an environment designed to give people the tools to develop holistically – to stay active, to learn, explore and innovate. Our distinctive approach combines a supportive, team-oriented atmosphere, with access to personal self-care for both physical and mental well-being, so each person is led by purpose.

On is an Equal Opportunity Employer. We are committed to creating a work environment that is fair and inclusive, where all decisions related to recruitment, advancement, and retention are free of discrimination.

• Step One

  It starts with you...

  You'll start by submitting your application to a specific role. We try to keep this step as simple as possible. We do get a lot of applications, but we review them all. If you're a good fit to the role, a recruiter will follow up with you directly. If you didn't receive a reply, or were unsuccessful this time around, we encourage you to look for other possible matches at On.

• Step Two

  Interview with a recruiter

  What ignites your spirit? This is where we’ll start getting to know all about you and what makes you tick – and it’s your first chance to get a feel for our culture. Chatting with a member of our talent team, you’ll learn more about On and how we work. We’ll learn about what motivates you and what you could bring to the team.

• Step Three

  Interview with a hiring manager

  Ready to dig into the details? This second interview will be held with your future manager and will focus on the specifics of the job. Together you’ll delve into your unique skills and experiences and how they could be relevant at On. It's also a time to assess how you might feel working side-by-side. Bring any questions you have about the job, the team or anything else you might like to know – this is an open forum.

• Step Four

  The Case Study

  What's your style? This task will help us understand how you think, face a challenge and give insight into your novel ideas. Designed to give everyone their best shot, your case study is based on something you might typically experience on the job. This is your chance to show us what you’ve got. So express yourself. Be you.

• Step Five

  The Experience Day

  Your first taste of the Oniverse. This is a time to meet some of the people you'll be working closest with. In person or virtually, you'll get a feel for the day-to-day at On and the people who make it happen. You'll chat with a few potential teammates - the conversations will be as equally driven by the role and your experience as by our values. We believe how you do things is just as important as what you do.

• Step Six

  The Result

  Are we a good fit? We’ll get together internally to share our feedback and decide if we’re a match. We know that job searching is a big time investment, so it’s not a decision we take lightly. It’s also time for you to reflect on the experience – are we the right place for you? No matter the outcome, we’ll give you meaningful feedback.