Enterprise AI Security Advisor

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and oversee a comprehensive strategy for securing AI agents, models, applications, and their supporting infrastructure.

• Maintain a prioritized assessment of AI security risks and establish priorities for teams and partners.

• Own the roadmap for AI security controls, tools, and enhancements; provide measurable outcomes to leadership.

• Counsel senior leaders on emerging AI threats and the trade-offs between security and productivity.

• Define security requirements and approved patterns for AI systems, which include aspects like identity, permissions, data boundaries, approvals, kill switches, logging, monitoring, and incident response.

• Publish reference architectures and acceptance criteria for AI applications, agents, and integrations.

• Establish control expectations for inference-time guardrails, AI gateways, and model and agent registries.

• Integrate AI security requirements into architecture reviews, risk acceptance processes, and change management protocols.

• Evaluate both internally developed AI systems and third-party AI products.

• Lead testing efforts for prompt injection, sensitive data exposure, excessive permissions, unsafe agent actions, jailbreaks, and misuse scenarios.

• Define the evidence required to transition controls from monitoring to blocking.

• Maintain threat models utilizing OWASP Top 10 for LLM Applications and MITRE ATLAS.

• Assess, select, and optimize cloud, endpoint, identity, data protection, and AI-specific security tools.

• Ensure visibility into AI usage and agent activities across the organization.

• Lead enterprise AI guardrail services, which include detection content, policy tuning, telemetry, dashboards, and integrations with SIEM, SOAR, EDR, identity, and ticketing platforms.

• Establish detection, alerting, and incident response playbooks for AI-specific incidents.

• Collaborate with AI application and agent teams to embed security into design, building, and deployment processes.

• Partner with privacy, legal, compliance, quality, and AI governance teams.

• Mentor engineers and security operations staff.

• Engage with vendors, industry groups, and technology partners on emerging AI security capabilities.

• At the Sr. Advisor level, act as the enterprise authority on AI security, lead a multi-year strategy and investment case, represent Cybersecurity with executives, auditors, and external partners, and set the technical direction.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related IT technical field.

• Over 10 years of experience in cybersecurity, security architecture, or platform/software engineering, including technical leadership, architecture, or senior advisory roles.

• Proven track record of establishing technical direction at an enterprise level and influencing executive investment decisions.

• Experience designing or leading security programs across various products, teams, or business units.

• Strong comprehension of cloud security, application security, identity and access management, data protection, and security operations.

• Practical experience with AI applications, agents, model platforms, or supporting infrastructure, including LLM APIs, agent frameworks, or protocols for agent-to-tool integration.

• Knowledge of LLM-specific threat models, such as prompt injection, jailbreaks, sensitive data leakage, tool misuse, excessive agency, data poisoning, and model misuse.

• Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS.

• Capability to evaluate security products against organizational risks.

• Proficient in Python or a comparable programming language.

• Working knowledge of AWS or Azure, REST APIs, and infrastructure-as-code.

• Ability to collaborate across engineering, infrastructure, security, product, legal, and leadership teams.

• Experience in building or operating inference-time guardrails, AI gateways, data loss prevention for AI traffic, or AI detection and response tools at an enterprise level.

• Familiarity with AI security reviews, adversarial red-teaming, or AI governance frameworks in regulated industries.

• Experience in securing GPU/HPC, model-training, or inference platforms and related data pipelines.

• Understanding of AI regulatory expectations, high-risk AI classifications, auditability requirements, and conformity assessments.

• Experience with SIEM/SOAR, EDR, and identity platforms in detection engineering or security operations.

• Relevant certifications such as CISSP, CCSP, or cloud security certifications.

• Experience with Agile methodologies in cross-functional teams.

🏝️ Benefits

• Company bonus based partly on individual and company performance.

• Company-sponsored 401(k) plan.

• Pension plan.

• Vacation benefits.

• Medical, dental, vision, and prescription drug coverage.

• Flexible benefits, including healthcare and/or dependent daycare flexible spending accounts.

• Life insurance and death benefits.

• Time off and leave of absence benefits.

• Well-being benefits, which include an employee assistance program, fitness benefits, and employee clubs and activities.