Senior Security Engineer Platform AI Security

Senior Security Engineer, Platform Security Tooling & AI The Senior Security Engineer, Platform Security Tooling & AI is a hands‑on technical contributor embedded within the Platform Security team, responsible for the implementation, operationalization, and ongoing optimization of selected AI security technologies across CNA’s enterprise. The role drives AI security tools from selection through full production deployment, ensures integration, adoption, and sustainment, and leads comparative vendor analysis and technology vetting. Essential Duties & Responsibilities Own end‑to‑end implementation of selected AI security technologies, from deployment planning through production rollout and steady‑state operations. Develop and execute operationalization plans, including integration with SIEM, EDR, SOAR, PAM and other security tools and workflows. Define and maintain runbooks, standard operating procedures, and configuration baselines for deployed AI security technologies. Partner with SOC, Detection Engineering, and Threat Management teams to tune AI security capabilities and ensure full utilization. Oversee managed service partners and vendors, holding them accountable to SLAs and quality standards. Monitor deployed platforms for performance, effectiveness, and emerging gaps, driving continuous improvement post‑implementation. Vendor Evaluation & Comparative Analysis Lead structured comparative analysis of candidate AI security technology vendors against defined security, operational, and business requirements. Develop and maintain evaluation criteria, scoring frameworks, and RFI/RFP documentation for AI security tooling. Design and execute hands‑on proofs of concept, technical pilots, and benchmarking exercises to validate vendor claims. Produce evidence‑based vendor assessment reports with actionable recommendations for platform selection decisions. Track the AI security vendor landscape and emerging capabilities to inform the team’s long‑term tooling roadmap. Cross‑Functional Collaboration & Enablement Serve as the Platform Security team's technical liaison to the AI Governance review process. Partner with Risk, Legal, and AI Governance teams to ensure deployments meet compliance and regulatory requirements. Apply industry standards and frameworks (NIST AI RMF, MITRE ATT&CK, OWASP Top 10 for LLMs, MITRE ATLAS) to implementations and vendor evaluations. Mentor and support team members on AI security platform capabilities and operational best practices. Communicate implementation status, vendor findings, and platform health to leadership in clear, accessible terms. Reporting Relationship Typically reports to a Director; works in close coordination with the AI Security team, AI Governance, and other Security domain leads. Skills, Knowledge & Abilities Deep working knowledge of enterprise security platforms (SIEM, EDR, SOAR, PAM) and hands‑on experience implementing and operationalizing these tools at enterprise scale. Strong understanding of AI/ML and GenAI security concepts, including risks introduced by AI‑enabled systems and best practices for securing AI workloads. Demonstrated experience conducting structured vendor evaluations and comparative analyses. Ability to develop operational runbooks, configuration baselines, and implementation plans for complex security platforms. Solid understanding of cloud security (AWS, Azure, Google Cloud) and secure configurations relevant to AI workloads. Strong vendor and managed service partner management skills, including performance escalation. Ability to translate technical findings into clear, actionable recommendations for both technical peers and senior leadership. Excellent analytical, problem‑solving, and communication skills; ability to manage multiple concurrent initiatives. Ability to respond effectively to urgent escalations and incidents related to deployed platforms. Education & Experience Bachelor’s Degree required; relevant technical disciplines preferred. 10+ years of overall technology experience, with significant depth in information security and security platform implementation. 1–2 years of hands‑on experience with AI‑enabled or AI‑adjacent security technologies in an enterprise environment. Proven track record of leading technology vendor evaluations and comparative analyses. Hands‑on experience with public cloud environments (AWS, Azure, Google Cloud). Relevant certifications preferred: CISSP, CCSP, GIAC, Splunk, or AI/cloud security credentials. Insurance or financial services experience preferred. Compensation In District of Columbia, California, Colorado, Connecticut, Illinois, Maryland, Massachusetts, New York and Washington, the national base pay range for this job level is $72,000 to $141,000 annually. Salary determinations are based on relevant work experience, skills, certifications and location. Benefits CNA offers a comprehensive and competitive benefits package that supports physical, financial, emotional and social wellbeing. For a detailed look at the benefits, please visit cnabenefits.com. EEO Statement CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, contact View email address on click.appcast.io. #J-18808-Ljbffr