Principal, AI Security
Itron, Inc.1 day ago
Chicago, IL, USA +2 moreStaff+
Base Salary
$96k - $165k/yr
Responsibilities
- Define and lead Itron’s enterprise AI security strategy, architecture, policies, standards, reference architectures, and roadmap.
- Design and implement controls across the AI and agent lifecycle, including identity governance, credential protection, authorization, autonomy controls, human oversight, memory isolation, and decommissioning.
- Establish security guardrails for generative AI platforms, model integrations, APIs, plugins, automation workflows, assistants, and agentic ecosystems.
- Develop governance controls for privacy, confidentiality, data protection, transparency, explainability, accountability, ethical AI use, and bias mitigation.
- Lead AI threat modeling, adversarial testing, security reviews, risk assessments, and AI red-team activities.
- Evaluate and mitigate threats such as prompt injection, tool misuse, privilege escalation, supply-chain compromise, context poisoning, insecure agent interactions, and rogue agent behavior.
- Partner with engineering, product, and architecture teams to embed secure-by-design practices into AI system development, deployment, testing, and operations.
- Design and pilot AI-assisted cybersecurity capabilities for detection engineering, threat hunting, vulnerability management, alert triage, evidence collection, and operations.
- Define logging, telemetry, monitoring, alerting, and reporting requirements for AI security control effectiveness and anomalous activity detection.
- Develop and operate AI Security Posture Management capabilities, including inventories, risk assessments, vendor evaluations, incident response, compliance readiness, and monitoring.
- Assess AI vendors, platforms, and service providers for architecture, data handling, privacy, access controls, resiliency, and operational risk.
- Provide technical leadership for AI-related incidents, investigations, governance decisions, policy exceptions, and risk acceptance reviews.
- Author technical standards, reference architectures, implementation guidance, and executive communications.
- Mentor engineers, architects, and security practitioners and track evolving AI technologies, regulations, attack techniques, and security practices.
Requirements
- 7+ years of experience in cybersecurity, security architecture, cloud security, identity and access management, application security, product security, or a related technical discipline.
- 2+ years of experience working with AI-enabled systems, machine learning environments, automation platforms, advanced analytics solutions, or generative AI technologies.
- Hands-on experience securing or building agentic systems, AI orchestration platforms, non-human identity solutions, model integrations, retrieval pipelines, and automated workflows.
- Experience implementing controls for cloud platforms, APIs, identity services, secrets management, data protection, logging, monitoring, and third-party integrations.
- Experience conducting threat modeling, architecture reviews, security assessments, control validations, and cyber risk evaluations.
- Strong understanding of authentication, authorization, least privilege, secure software design, and modern security architectures.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or an equivalent combination of education and experience.
- Preferred experience securing frontier AI model deployments through provider APIs, Microsoft Foundry, Amazon Bedrock, model gateways, or comparable platforms.
- Preferred experience with Microsoft Foundry Agent Service, Model Context Protocol implementations, AI gateways, GitHub Copilot, Microsoft 365 Copilot, Vertex AI, Databricks AI capabilities, ChatGPT Enterprise, or similar platforms.
- Familiarity with NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, ISO/IEC 42001, and AI regulatory readiness initiatives.
- Preferred experience with AI red teaming, adversarial testing, prompt injection testing, abuse-case development, or AI deployment readiness assessments.
- Preferred background in secure software development, DevSecOps, CI/CD security, container security, software supply chain security, or product security architecture reviews.
- Experience in regulated environments aligned with ISO 27001, SOC 2, NIST, GDPR, CMMC, critical infrastructure, utilities, or similar frameworks is preferred.
- Professional certifications such as CISSP, CCSP, CSSLP, Microsoft Security certifications, cloud security certifications, AI governance certifications, or AI security certifications are preferred.
- Strong written, verbal, facilitation, stakeholder-management, collaboration, and execution skills.
Benefits
- Competitive financial, social, health, and wellbeing programs.
- Paid vacation, 401(k) matching, and employee stock purchase program.
- Hybrid work schedule.
- Annual bonus program eligibility.
- Less than 25% average travel.
Tech Stack
Databricks
Categories
About Itron, Inc.
Itron builds smart meters, sensors, communications networks, and software that help electric, gas, and water utilities—and some cities—measure, manage, and analyze resource usage. Its portfolio spans advanced metering infrastructure, meter data management, distributed energy management, and professional services, sold to utilities worldwide. Founded in 1977 and headquartered in Liberty Lake, Washington, Itron is a public company on NASDAQ serving customers in more than 100 countries.