AI Principal Cybersecurity Engineer

Zions Bancorporation•Midvale, UT

1d•Hybrid

About The Position

Zions Bancorporation is seeking a Principal Cybersecurity Engineer to design and implement strategies for securing the Bank against AI threats. This position will report directly to the Director of Cybersecurity Operations and will focus on mitigation of AI threats to the technology stack: Open-source, supply chain attacks, network intrusion, and other novel techniques for AI-driven compromise. In addition, the Engineer will provide consultative guidance to counterparts in the Technology organization to implement a strategy for risk mitigation. Critical success factors for the role include the ability to lead through technical excellence and collaboration, work cross-functionally across multiple cyber and technology disciplines, and coordinate progress in simultaneous initiatives.

Requirements

8+ years of enterprise-level experience in one or more of cybersecurity, software engineering, technology infrastructure
Extensive knowledge of the open-source software ecosystem, licenses, and enterprise approaches for governing OSS
Ability to work collaboratively and provide technical leadership with peer functions across software engineering, open-source governance, release engineering, enterprise architecture, etc.
Demonstrated accountability working independently in a high-discretion, low supervision environment to deliver timely and quality results
Familiarity with leading commercial and open-weight LLMs and potential application to CTEM, red teaming, exploitation, and OSS vulnerability identification
Experience with data models, data lakes, and SIEM
Understanding of software engineering principles and software development lifecycle
Proficiency in software vulnerability scanning and exploitation, including familiarity with various types of scanning (SCA, SAST, DAST, penetration testing)
Proficiency in one or more software languages is a big plus
Red Team experience is a plus

Responsibilities

Operate at the intersection of open-source software, AI security (offensive and defensive), and vulnerability management to support governance and proactive and reactive remediation activities that reduce the Bank's exposure to cybersecurity vulnerabilities
Develop strategy and tooling capability for CTEM (Continuous Threat Exposure Management) aligned with the MITRE ATT&CK framework and monitor the operation of continuous exposure management across software and IT infrastructure
Provide technical direction to integrate cyber functions to operate in an AI paradigm across Offensive Security/Red Team, Vulnerability Management, Incident Response, Identity, and other cybersecurity functions
Liaise and provide consultative guidance to collective stakeholders (Application Security, Vulnerability Management, Software Engineering, OSS Governance) on leading practices for securing our software stack from AI-driven exploit paths