Lead AI Cybersecurity Champion
Sherwin-Williams2 days ago
Cleveland, OH, USAStaff+
Responsibilities
- Partner with development teams, architects, product owners, and Cybersecurity resources to identify and address application and AI security risks.
- Facilitate threat modeling, abuse-case analysis, security reviews, and secure design activities for traditional and AI-enabled applications.
- Define security requirements and recommend controls for architecture, authentication, authorization, data protection, API security, and AI component integration.
- Provide security guidance for LLM-based applications, internally developed AI solutions, agentic AI systems, and applications using third-party AI services.
- Help teams prioritize and remediate application security vulnerabilities and engage application penetration testers when needed.
- Evaluate application designs, data flows, trust boundaries, model interactions, agent capabilities, external integrations, authorization boundaries, and tool permissions.
- Develop and maintain application and AI security standards, guidance, reference implementations, documentation, and secure development patterns.
- Create or contribute to scripts, automation, reusable security components, and application security tools.
- Deliver application and AI security training, mentor developers, and communicate risks and recommendations to management and technical teams.
- Track security activities, risks, recommendations, and progress across assigned teams and applications.
Requirements
- Bachelor’s degree or foreign equivalent, or at least 12 years of Information Technology or Business experience in lieu of a degree.
- At least 8 years of IT and/or cybersecurity experience.
- At least 8 years of experience in software development, application security, cybersecurity, or a related technology field.
- Experience across multiple phases of the Software Development Lifecycle.
- Strong knowledge of secure software design, web applications, APIs, application security vulnerabilities, identity security, application architecture, data flows, integrations, trust boundaries, threat modeling, vulnerability remediation, cloud-native architectures, and cloud security practices.
- Experience partnering with software development teams to identify and resolve application security risks and reviewing source code for security weaknesses or remediation validation.
- Experience facilitating technical discussions and communicating security requirements to developers, architects, product owners, and other stakeholders.
- Familiarity with AI-enabled application architectures and associated security risks, with demonstrated aptitude and interest in LLM, machine learning, and agentic AI security.
- Experience developing scripts, automation, reusable security components, or application security tools.
- Preferred experience includes AI application security testing, designing or supporting LLM-based applications or agentic AI systems, AI threat modeling, application penetration testing, and developing security standards or reusable secure development patterns.
- Must be legally authorized to work in the United States without company sponsorship and be at least eighteen years of age.
Benefits
- Remote position.
- Not eligible for current or future work-visa sponsorship, including conversion to an H-1B visa.
Categories
About Sherwin-Williams
Sherwin-Williams manufactures and sells paints, coatings, and related products for homeowners, professional contractors, and industrial/OEM customers. It goes to market through company-owned retail stores, commercial sales and distribution, and specialty brands serving architectural, automotive refinish, and industrial and marine applications. Founded in 1866 and headquartered in Cleveland, Ohio, Sherwin-Williams is a public company listed on the NYSE.