Lead Infosecurity Engineer - AI Security Platform

Description

The company is building out its AI security capability and needs a lead to run the engineering and day-to-day operation of agentic security operations platforms and AI-driven security tools.

You will connect security operations, security engineering, security architecture and AI engineering so that every solution is secure, reliable, explainable and ready for production.

The role carries project and change leadership, security oversight and risk management across complex information security initiatives. You will set design direction, spot new risks, plan mitigations and win over senior leaders to simpler approaches. You will also coach and mentor colleagues and may help build new intellectual property.

Responsibilities

• Drive the rollout, integration, deployment and upkeep of Agentic SOC, AI-powered security operations and autonomous investigation tools.
• Write security automation in Python that calls REST APIs and cloud services, and define the infrastructure as code (IaC) behind it.
• Create and maintain RAG architectures, agent orchestration frameworks, evidence collection pipelines, knowledge retrieval services and AI workflow integrations.
• Set secure engineering standards, reusable patterns and architecture frameworks for AI-enabled security platforms.
• Connect Microsoft Sentinel, SOAR, threat intelligence, endpoint, identity, cloud and email security platforms at scale.
• Add observability, monitoring, audit logging and explainability to AI systems to improve performance and governance.
• Find security risks in AI models, agents, data flows, cloud platforms and third-party tools, and propose practical mitigations.
• Work with Security Operations, Architecture, Risk, Data and Technology teams to sharpen detection, make triage more consistent, speed up autonomous investigations and cut MTTR.

Requirements

• 7+ years of cybersecurity engineering experience across several information security domains.
• 2+ years of hands-on work implementing AI, generative AI, machine learning, agentic AI or AI platform technology.
• Experience building or supporting security automation, SOAR or enterprise security platform solutions.
• Strong software skills in Python, API development and integration, and automating security workflows.
• Experience with Microsoft Sentinel, security orchestration tools and production security operations environments.
• Hands-on work with Azure, AWS, cloud-native services and infrastructure as code (Terraform, Bicep, ARM or similar).
• Working knowledge of LangChain, LangGraph, Semantic Kernel, LlamaIndex, MCP, RAG architectures, AI orchestration frameworks and enterprise AI services such as Azure OpenAI or Security Copilot.
• Proven record of leading complex technical work, explaining security risk to senior stakeholders and delivering scalable, risk-aligned solutions.
• Preferred: experience with vector databases and retrieval services such as Azure AI Search, Pinecone or Redis Vector.
• Preferred: knowledge of AI governance, observability, audit logging, data lineage and model monitoring.
• Preferred: experience with graph technologies such as Neo4j, Amazon Neptune or TigerGraph.
• Preferred: familiarity with Kubernetes, cloud-native architectures and security data engineering.
• Preferred: experience in highly regulated settings such as financial services, banking or healthcare.

Conditions

Work from a company location at least three days per week.

Accommodations for disabilities are available during the application and hiring process.

Benefits

• Healthcare covering medical, dental and vision.
• Basic and optional term life insurance.
• Short-term and long-term disability cover.
• Pregnancy disability and parental leave.
• 401(k) plus an employer-funded retirement plan.
• Paid vacation of two to five weeks, depending on salary grade and tenure.
• Up to 11 paid holiday opportunities.
• Adoption assistance.
• Sick and Safe Leave accrues at one hour for every 30 hours worked, capped at 80 hours per calendar year unless the law requires otherwise.