Lead AI Cybersecurity Champion
Sherwin-Williams3 days ago
Cleveland, OH, USAStaff+
Responsibilities
- Partner with development teams, architects, and Cybersecurity stakeholders to identify and address application and AI security risks.
- Define security requirements and facilitate threat modeling and abuse-case analysis for traditional and AI-enabled applications.
- Review application designs, data flows, trust boundaries, model interactions, agent capabilities, and external integrations.
- Provide secure architecture, authentication, authorization, data protection, API security, and AI integration guidance.
- Help teams interpret, prioritize, and remediate application security vulnerabilities.
- Develop and maintain application and AI security standards, guidance, reusable patterns, reference implementations, and documentation.
- Facilitate security reviews and engage application penetration testers when needed.
- Track and report security activities, risks, recommendations, and remediation progress.
- Develop and deliver security training and mentor developers and team members in secure development practices.
- Contribute to scripts, automation, reusable security components, and tools that improve application security capabilities.
Requirements
- Bachelor’s degree or foreign equivalent, or at least 12 years of Information Technology or Business experience in lieu of a degree.
- At least 8 years of IT and/or cybersecurity experience.
- At least 8 years of software development, application security, cybersecurity, or related technology experience.
- Experience across multiple phases of the Software Development Lifecycle.
- Strong knowledge of secure software design, web applications, APIs, application security vulnerabilities, identity security, threat modeling, vulnerability remediation, cloud-native architectures, and cloud security practices.
- Experience partnering with software development teams, facilitating technical discussions, reviewing application designs, and recommending practical security controls.
- Familiarity with AI-enabled application architectures and their security risks, with demonstrated interest in LLM, machine learning, and agentic AI security.
- Software development experience using one or more programming or scripting languages.
- Experience reviewing source code, providing remediation guidance for complex vulnerabilities, and developing security automation or tools.
- Ability to manage security engagements across multiple teams and applications and collaborate across development, architecture, product, and Cybersecurity functions.
- Preferred experience with AI application security testing, LLM-based applications, machine learning solutions, agentic AI systems, AI threat modeling, AI-specific security risks, agent authorization boundaries, penetration testing, and secure development standards.
- Must be legally authorized to work in the United States without company sponsorship and be at least 18 years old.
Benefits
- This is an on-site position reporting to Global Headquarters in downtown Cleveland, Ohio; it is not remote or hybrid.
- The position is not eligible for work-authorization sponsorship now or in the future, including H-1B conversion.
- The role includes access to confidential and proprietary information and requires a criminal-history review.
Categories
About Sherwin-Williams
Sherwin-Williams manufactures and sells paints, coatings, and related products for homeowners, professional contractors, and industrial/OEM customers. It goes to market through company-owned retail stores, commercial sales and distribution, and specialty brands serving architectural, automotive refinish, and industrial and marine applications. Founded in 1866 and headquartered in Cleveland, Ohio, Sherwin-Williams is a public company listed on the NYSE.