Summary of Role:The Senior Cyber Defense Engineer / Analyst is a senior technical role within the Cyber Defense function. This position is responsible for selecting, engineering, maintaining, tuning, and optimizing cyber defense technologies that detect, monitor, and report on enterprise security risk, including emerging risks associated with artificial intelligence systems, models, data, and third-party AI-enabled services. The role supports the Vice President of Cyber Assurance to ensure that cyber and AI related security risks are identified, monitored, escalated, and tracked to remediation in a manner aligned with regulatory expectations and the NIST AI Risk Management Framework (AI RMF). This position also helps operationalize AI governance across the enterprise by defining roles and accountability, improving reporting for management, and identifying opportunities to responsibly expand the use of AI tools across the Information Risk and Security department.
Essential Job Functions/Responsibilities:- Lead the evaluation, selection, implementation, tuning, and lifecycle management of cyber defense and security monitoring tools used to detect threats, anomalous activity, control weaknesses, and emerging technology risks, including AI-specific security risks.
- Establish and maintain monitoring and reporting capabilities for AI security risks in alignment with the NIST AI RMF, including risks related to data integrity, model misuse, prompt injection, model evasion, unauthorized access, information leakage, third-party AI services, and governance/control gaps.
- Develop actionable management reporting and dashboards for cyber defense and AI security risks, including trend analysis, control effectiveness, exception reporting, incident metrics, emerging risk indicators, and remediation status.
- Work closely with the Vice President of Cyber Assurance to ensure identified security risks are documented, monitored, tracked, escalated appropriately, detected, and remediated in expeditiously.
- AI security tools implemented must be continually enhanced to reduce time to detect and respond to incidents as threats and attacks continue to evolve.
- Coordinate with AI Governance, IT, and business owners to ensure AI-enabled systems and use cases are subject to secure implementation and usage, appropriate monitoring, control validation, and risk tracking throughout their lifecycle.
- Dual focus includes looking at AI risks with AI security tools and monitoring as well as advising on the use of AI securely by the business.
- Partner with internal stakeholders and third parties to validate that AI-related controls are operating effectively and that issues are documented with clear ownership, target dates, and status reporting.
- Support cyber investigations, detection engineering, threat analysis, and response activities involving AI-enabled applications, automation platforms, cloud services, identity infrastructure, and enterprise security tooling.
- Assess security telemetry coverage across on-premises, cloud, SaaS, identity, endpoint, and AI-related environments; identify gaps and recommend enhancements to improve visibility and control assurance.
- Recommend, pilot, and help govern appropriate use of AI-enabled tools and automation capabilities across the Information Risk and Security department to improve efficiency, detection, analysis, workflow orchestration, reporting, and control monitoring.
- Maintain documentation for monitoring standards, operating procedures, use cases, reporting logic, escalation criteria, and control mappings relevant to cyber defense and AI security oversight.
- Provide subject matter expertise to support policy development, standards, risk assessments, new use case reviews, control testing, and executive reporting related to AI adoption and AI security risk management.
Minimum Job Qualifications:- Bachelor's degree in cybersecurity, information security, computer science, information systems, engineering, or a related field; equivalent experience may be considered.
- 10+ years of progressive experience in cyber defense, security engineering, security operations, threat detection, or security analytics, including senior-level responsibility for security tooling and reporting.
- Hands-on experience with security technologies such as SIEM, SOAR, EDR/XDR, email security, vulnerability management, identity and access monitoring, cloud security tooling, network detection and response, data protection, and threat intelligence platforms.
- Experience selecting, implementing, tuning, and administering enterprise security tools and translating technical outputs into meaningful management reporting.
- Strong understanding of cybersecurity frameworks and control environments, including NIST Cybersecurity Framework, NIST SP 800-53 concepts, and practical risk-based control monitoring.
- Knowledge and experience of AI-related security risks, AI governance considerations, and the NIST AI RMF, including how to apply its concepts in a regulated enterprise environment.
- Demonstrated ability to work across technical, risk, governance, and business teams to drive accountability and measurable risk reduction.
- Experience with AI or ML security, AI-enabled applications, model governance, or security reviews of third-party AI capabilities.
- Experience using automation and AI-assisted tooling to improve threat detection, triage, investigation, reporting, workflow efficiency, or control monitoring.
- Relevant certifications such as CISSP, GIAC, Security+, Azure/AWS/GCP security certifications, or training related to AI governance, AI risk, or secure AI deployment
- Strong written and verbal communication skills, including the ability to brief leadership and produce concise, decision-useful reporting.
Compensation: $106,194-$138,052, plus a competitive benefits package
Bilingual individuals who are fluent in a second language in addition to English are highly encouraged to apply.
