AI Security Engineer

Truist Bank•Charlotte, NC

About The Position

The AI Security Engineer implements, validates, and supports security controls for artificial intelligence, generative AI, and agentic solutions across the enterprise. As a contributor within the Forge AI Security organization, the role works with AI engineering, application development, platform, cybersecurity, governance, and architecture teams to help ensure AI-enabled solutions are secure, resilient, compliant, and operationally ready. The role supports the design, implementation, testing, monitoring, and validation of security capabilities for AI-enabled applications, intelligent agents, retrieval-augmented generation (RAG) solutions, and enterprise AI platforms. It contributes to security reviews, threat modeling, adversarial testing, control validation, and deployment readiness throughout the AI delivery lifecycle. The engineer works with developers and solution teams to implement controls, troubleshoot security issues, validate configurations, and improve security posture. The position supports AI solutions developed in no-code, low-code, and pro-code environments and deployed on Microsoft Azure and AWS, including Azure AI, Azure OpenAI, and Amazon Bedrock.

Requirements

Bachelor’s degree or equivalent education, training, and work-related experience.
At least 5 years of experience in security engineering or related cybersecurity roles.
Advanced knowledge of cybersecurity principles, theories, and concepts.
Proven experience with software development lifecycle security practices.
Advanced knowledge of threat modeling, security testing, and penetration testing.
Experience implementing and managing complex information security technologies.
Understanding of AI and LLM security concepts, including prompt injection, jailbreak techniques, sensitive data exposure, tool-use risks, model misuse, and output handling concerns.
Familiarity with AI-enabled applications, intelligent agents, automation platforms, or generative AI solutions.
Knowledge of cloud-native security principles, access control, identity management, secrets handling, and secure integration design.
Understanding of monitoring, logging, alerting, and observability concepts.
Familiarity with no-code, low-code, and pro-code development environments and related security considerations.
Strong analytical, troubleshooting, and problem-solving skills.
Effective written and verbal communication skills.

Nice To Haves

At least 5 years of experience in cybersecurity engineering, application security, cloud security, software engineering, DevSecOps, or related technical disciplines.
Experience implementing security controls for enterprise applications, APIs, cloud-native solutions, or distributed systems.
Experience participating in security reviews, security testing, vulnerability management, or threat modeling activities.
Experience supporting software development lifecycle security practices.
Experience collaborating with software engineering and technology teams on security requirements and remediation activities.
Experience implementing or supporting security controls for generative AI, AI-enabled applications, agentic systems, or intelligent automation platforms.
Experience with Microsoft Azure security services, Azure AI Services, Azure OpenAI, Azure AI Foundry, Copilot Studio, or related technologies.
Experience with AWS cloud services, including Amazon Bedrock and related AI capabilities.
Experience performing application security testing, penetration testing, vulnerability assessments, or security validation activities.
Experience in financial services, banking, healthcare, government, or other regulated industries.
Experience supporting governance, compliance, or audit-driven technology environments.
Familiarity with retrieval-augmented generation (RAG), vector databases, agent orchestration frameworks, and AI workflow platforms.
Industry certifications such as Security+, Azure Security Engineer Associate, AWS Security Specialty, CISSP Associate, GIAC certifications, or similar credentials.

Responsibilities

Implement and maintain security controls for AI-enabled applications, agentic workflows, intelligent automation solutions, and AI platforms.
Support secure integration of AI services, APIs, orchestration frameworks, and external tool connections.
Configure and validate identity protections, access controls, secrets management, logging, monitoring, and deployment safeguards.
Help engineering teams implement secure patterns for AI and generative AI solutions across no-code, low-code, and pro-code environments.
Participate in security architecture reviews, threat modeling, and AI security assessments.
Identify security risks, design weaknesses, and control gaps in AI-enabled solutions.
Validate that implemented controls and security requirements are effective.
Support adversarial testing, misuse-case analysis, vulnerability assessments, and deployment readiness reviews.
Document findings, recommendations, remediation activities, and validation results.
Build and maintain monitoring and alerting capabilities for AI-enabled applications and workflows.
Develop and enhance detection logic for suspicious prompts, unusual workflow behavior, unauthorized access attempts, and policy violations.
Support collection and analysis of telemetry used to monitor AI system health, security, and compliance.
Assist cybersecurity operations teams in investigating and remediating AI-related security events.
Partner with software engineering, platform, product, architecture, and cybersecurity teams to implement security requirements throughout the development lifecycle.
Provide project teams with technical guidance on secure implementation practices and control requirements.
Participate in design reviews, working sessions, and implementation discussions so security is considered early in delivery.
Assist with remediation planning and implementation for identified security findings.
Stay current on emerging AI security risks, threats, technologies, and industry trends.
Contribute to improvements in AI security controls, monitoring capabilities, testing practices, and implementation standards.
Help develop security documentation, implementation guides, runbooks, and operational procedures.
Support automation efforts that improve security efficiency, consistency, and control effectiveness.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401(k) plan
At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
10 sick days, prorated
Paid holidays
Depending on position and division, eligibility for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan