2 months ago
Charlotte, NC, USAMid Level / Senior

Responsibilities

  • Design, implement, and maintain security controls for generative AI, LLMs, AI agents, and machine learning platforms.
  • Develop secure architecture patterns, standards, and guardrails for AI solutions across ingestion, development, deployment, and inference workflows.
  • Integrate AI security requirements into software development, DevSecOps, and MLOps processes.
  • Secure AI platforms and cloud services including Azure AI, Azure OpenAI, AWS Bedrock, and Databricks AI.
  • Implement logging, telemetry collection, threat detection, and security monitoring for AI environments.
  • Assess AI risks including prompt injection, model poisoning, data leakage, adversarial attacks, unauthorized access, insecure agent behavior, RAG vulnerabilities, and third-party supply-chain threats.
  • Partner with architecture, engineering, data science, privacy, legal, compliance, and cloud teams on secure solution design and operations.
  • Support AI security testing, red-team exercises, incident-response preparedness, control validation, and continuous improvement.

Requirements

  • Bachelor's degree in Information Security, Computer Science, Engineering, or a related field, or an equivalent combination of education, certifications, and experience.
  • 3–5 years of experience in cybersecurity, security engineering, cloud security, or security architecture.
  • Experience designing and implementing security solutions in Azure, AWS, or Google Cloud Platform.
  • Knowledge of networking, operating systems, web applications, identity and access management, authentication, privileged access controls, and certificate management.
  • Understanding of application security, API security, modern threat techniques, and cloud security risks.
  • Familiarity with NIST, OWASP, ISO, SOX, and SWIFT frameworks.
  • Working knowledge of AI, machine learning, and generative AI technologies and their lifecycle security considerations.
  • Strong written and verbal communication skills for technical and non-technical audiences.
  • Hands-on experience with Azure OpenAI, AWS Bedrock, Databricks AI, or similar AI platforms is preferred.
  • Experience implementing security controls in MLOps environments and exposure to AI security testing, red teaming, or adversarial attack simulations are preferred.
  • Security certifications such as CISSP, GSEC, GIAC, CEH, CSSLP, CCSP, or cloud security certifications are preferred.
  • An advanced degree in Information Security, Cybersecurity, Computer Science, or a related discipline is preferred.

Benefits

  • Hybrid workforce model with the opportunity to work from home and from an SMBC office.
  • Employees must live within a reasonable commuting distance of their office location.
  • Specific hybrid schedules are discussed during the interview process.
  • Reasonable accommodations are available during candidacy for applicants with disabilities.

Tech Stack

Categories

Sumitomo Mitsui Banking Corporation

About Sumitomo Mitsui Banking Corporation

10,000+ employees

Sumitomo Mitsui Banking Corporation provides corporate, investment, and commercial banking services—such as lending, capital markets, global trade finance, treasury/FX, and transaction banking—to corporate, institutional, and consumer clients. Headquartered in Tokyo, it is the core banking subsidiary of Sumitomo Mitsui Financial Group (SMFG), one of Japan’s three major banking groups, whose shares trade in Tokyo and as NYSE ADRs (SMFG). SMBC serves clients through a network spanning nearly 40 countries.

Contact me