Enterprise AI Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Responsibilities:
- Implement, tune, and operate detection and policy content for enterprise AI guardrails across AI assistants, coding agents, and internally built agents
- Triage findings, classify true and false positives, and produce evidence to move controls from monitoring to blocking
- Maintain runbooks, configuration as code, and test suites for guardrail rules and policies
- Participate in tuning reviews, change management, and support rotations
- Assess AI applications, agents, integrations, MCP servers, tool connectors, and third-party AI products
- Execute tests for prompt injection, sensitive data exposure, excessive permissions, and unsafe agent actions
- Contribute to AI threat models and security acceptance criteria using OWASP Top 10 for LLM Applications and MITRE ATLAS
- Track remediation and verify fixes
- Build telemetry pipelines, analytics, and dashboards for AI usage and agent activity
- Develop AI-specific detections and alerts and forward them to SIEM and SOAR platforms
- Support security operations and insider-threat investigations involving AI tools
- Measure and report control effectiveness metrics
- Integrate AI security tooling with AWS, Azure, endpoint, identity, data protection, and ticketing platforms
- Automate deployment, testing, and rollback using CI/CD and infrastructure-as-code
- Evaluate and pilot vendor and platform capabilities
- Apply least privilege, secrets management, and logging to security tooling
- Work with AI application and agent teams to apply security requirements and approved patterns
- Contribute to documentation, standards, and reusable patterns
- Stay current on LLM and agent threats, vendor guardrails, and industry frameworks
- At Principal Engineer level, lead workstreams, mentor engineers, and represent the team in cross-functional sessions
Requirements:
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or an IT-related field
- 2+ years of experience in security engineering, software engineering, cloud engineering, or security operations
- Authorized to work in the United States on a full-time basis
- Lilly will not provide support for or sponsor work authorization or visas for this role
- Proficiency in Python and Bash or PowerShell scripting
- Experience with REST APIs and structured data such as JSON and SQL
- Working knowledge of AWS or Azure
- Working knowledge of identity and access management, application security, data protection, or security monitoring
- Hands-on familiarity with LLM-based applications, coding assistants, or agents
- Understanding of prompt injection, data leakage, and excessive permissions
- Experience with detection engineering, DLP, or rule tuning in SIEM, EDR, or proxy/gateway platforms
- Experience with LLM APIs, agent frameworks, MCP, and AI evaluation or red-team tooling
- Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS
- Experience with infrastructure-as-code, containers, and CI/CD pipelines, such as Terraform, CloudFormation, Docker, or GitHub Actions
- Experience querying and analyzing data at scale using SQL, Athena, or similar tools
- Experience building dashboards
- Relevant certifications such as Security+, AWS or Azure security, or GIAC, or participation in CTF or AI red-team exercises
- Ability to analyze data, write clear findings, and communicate technical issues to technical and non-technical stakeholders
- Attention to detail, sound judgment, and comfort working in a regulated environment with change control and audit requirements
Benefits:
- Company bonus depending in part on company and individual performance
- Company-sponsored 401(k)
- Pension
- Vacation benefits
- Medical, dental, vision, and prescription drug benefits
- Flexible benefits, including healthcare and/or dependent day care flexible spending accounts
- Life insurance and death benefits
- Time off and leave of absence benefits
- Well-being benefits, including employee assistance program, fitness benefits, and employee clubs and activities
Similar Jobs
Group IT Security Manager
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.