AI Security Engineering Lead
Truist Financial Corporation1 day ago
Charlotte, NC, USAStaff+
Responsibilities
- Lead security architecture reviews, threat modeling, design assessments, and deployment readiness reviews for AI-enabled applications, agents, RAG solutions, and enterprise AI platforms.
- Define secure design patterns, reference architectures, standards, guardrails, and technical implementation patterns for generative AI and agentic systems.
- Design, implement, configure, and validate security controls across development, testing, and production environments.
- Develop protections against prompt injection, indirect prompt manipulation, unauthorized tool use, sensitive data exposure, privilege escalation, and other AI-specific attacks.
- Conduct security assessments, control validations, hands-on testing, adversarial testing, misuse-case analysis, red-teaming activities, and remediation planning.
- Design monitoring, alerting, detection, telemetry, and observability capabilities for AI and agentic systems.
- Partner with cybersecurity operations and incident response teams on AI-related security events.
- Serve as the primary AI security consultant for multiple concurrent initiatives and advise engineering, platform, architecture, governance, risk, and cybersecurity teams.
- Lead technical discussions and mentor engineers and project teams on AI security practices and emerging threats.
- Research emerging AI threats and drive improvements to AI security processes, controls, tooling, automation, standards, and governance.
Requirements
- Bachelor’s degree or equivalent education, training, and work-related experience.
- Minimum of 10 years of experience in security engineering or related cybersecurity roles.
- Deep knowledge of cybersecurity principles, software development lifecycle security, threat modeling, security testing, penetration testing, and complex information security technologies.
- Strong understanding of AI and LLM security concepts, including prompt injection, jailbreaks, sensitive data exposure, agent security, output manipulation, tool-use abuse, and retrieval security.
- Experience designing, implementing, or validating security controls for AI applications, AI platforms, intelligent agents, or automation workflows.
- Knowledge of no-code, low-code, and pro-code AI development approaches.
- Knowledge of cloud-native security, identity management, access controls, secrets management, secure integration design, logging, monitoring, observability, and security detection.
- Preferred: at least 3 years leading complex security engineering initiatives, assessments, and technical reviews.
- Preferred: experience with Azure security services, Azure AI Services, Azure OpenAI, Azure AI Foundry, Microsoft Copilot, Copilot Studio, AWS services, Amazon Bedrock, RAG, agent orchestration, tool-calling architectures, and autonomous workflows.
- Preferred: experience with vulnerability management, security assessments, enterprise applications, cloud-native services, APIs, distributed systems, regulated industries, governance and compliance, or cybersecurity consulting.
- Preferred certifications include CISSP, CISM, CCSP, CSSLP, GIAC, Azure Security Engineer Associate, AWS Security Specialty, or similar credentials.
Benefits
- Eligible regular teammates working 20 or more hours per week may receive medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan.
- Benefits may include a defined benefit pension plan, restricted stock units, and/or deferred compensation plan depending on the position and division.
- Employees receive at least 10 days of vacation, 10 sick days, and paid holidays during the first year, prorated as applicable.
- This is a regular, non-temporary position on the first shift in the United States; specific benefit eligibility depends on position, division, and work status.
About Truist Financial Corporation
Truist Financial Corporation provides consumer, small‑business, and commercial banking, plus capital markets, payments, mortgage, and wealth management services across the U.S. It earns interest and fee income from deposits, lending, investment banking, and advisory services delivered through Truist Bank and affiliates. The company was formed in 2019 by the merger of BB&T and SunTrust Banks and is headquartered in Charlotte, North Carolina; it is publicly traded on the NYSE (ticker: TFC).