Principal Security AI Engineer

This is your opportunity to join AXIS Capital – a trusted global provider of specialty lines insurance and reinsurance. We stand apart for our outstanding client service, intelligent risk taking and superior risk adjusted returns for our shareholders. We also proudly maintain an entrepreneurial, disciplined and ethical corporate culture. As a member of AXIS, you join a team that is among the best in the industry.At AXIS, we believe that we are only as strong as our people. We strive to create an inclusive and welcoming culture where employees of all backgrounds and from all walks of life feel comfortable and empowered to be themselves. This means that we bring our whole selves to work. All qualified applicants will receive consideration for employment without regard to any protected characteristic, including age, color, disability, ethnicity, gender identity, marital status, national origin, pregnancy, race, religion, sex, sexual orientation, veteran status, or any basis prohibited by the laws that govern its operations.Design, develop, and operationalize secure agentic AI capabilities in risk & security operationsBuild, deploy, and maintain AI-powered security agents to augment detection, investigation, and response workflowsIdentify high-value use cases where AI agents can accelerate analyst productivity and improve outcomesContinuously validate agent performance, accuracy, and reliability in real-world operationsEnsure responsible and secure use of AI across risk & security operationsEnforce strong security controls for enterprise AI platforms (e.g., Microsoft Copilot, Copilot Studio, Azure AI Foundry)Mitigate AI-specific risks including data leakage, prompt injection, oversharing, and unauthorized accessEstablish evaluation practices for agent accuracy, hallucination risk, false positives/false negatives, failure modes, explainability, audit logging, and measurable operational impact.Ensure human-in-the-loop oversight to include analysts challenge, refine, and retrain AI-driven outcomesImplement and manage data protection controls for AI and enterprise dataDeploy and optimize Microsoft Purview capabilities (DLP, Information Protection, Insider Risk) across M365 and AI platformsImplement DLP controls for AI interactions and outputs to prevent sensitive data exposureMonitor and tune data protection policies to meet regulatory and business requirementsSecure AI agents, automation, and data flowsDefine and enforce access controls, data handling policies, and auditability for AI agents and automated workflowsEnsure all AI-driven processes align with Zero Trust and least privilege principlesEvaluate and onboard new AI tools and agents with a security-first approachOperational monitoring, detection, and responseMonitor AI platform activity and data usage to detect anomalies, misuse, or policy violationsSupport incident response and investigations involving AI systems and data exposure scenariosIntegrate AI agent workflows directly with SIEM/XDR platforms to allow autonomous context enrichment and preliminary incident triage.Support enterprise rollout of AI governance and data security programsAbout You:We encourage you to bring your own experience and expertise to the table, so while there are some qualifications and experiences, we need you to have, we are open to discussing how your individual knowledge might lend itself to fulfilling this role and help us achieve our goals.What you need to have:Bachelor’s degree in Information Technology, Cybersecurity, or related field (Master’s preferred), OR equivalent experience leading enterprise-scale security engineering initiatives5+ years of progressive experience in cybersecurity, data protection, or security engineeringProven experience designing and securing enterprise AI platforms, including:Microsoft Copilot, Copilot Studio, and Azure AI FoundryGovernance, data grounding controls, prompt injection protections, and AI risk managementDevelopment or oversight of security controls for AI-driven workflows and autonomous/agent-based systems.Hands-on expertise with Microsoft security and compliance ecosystems, including:Microsoft Purview (end-to-end deployment, governance, and optimization)Microsoft 365, Azure, and Entra ID security architectureCollaboration platforms (Exchange, SharePoint, OneDrive, Teams) with a strong focus on data protection and insider riskProven expertise in Data Security and Protection, including:Data Loss Prevention (DLP) strategy, engineering, and tuning at scaleData classification, sensitivity labeling, and lifecycle managementInsider Risk Management and Information Protection programsDemonstrated ability to architect and lead enterprise security solutions, including:Defining strategy, roadmaps, and reference architecturesDriving cross-functional initiatives across Security, IT, Legal, and Business teamsActing as a technical authority and escalation point for complex security challengesStrong development and automation capabilities, including:Proficiency in Python, PowerShell, TypeScript or similar languages; secure API integration; Microsoft Graph and security platform APIs; CI/CD practices; test automation; and experience deploying AI-enabled workflows using Azure Functions, Logic Apps, or comparable cloud-native services.Building automation pipelines for detection, response, and data governance workflowsExperience with security analytics and telemetry, including:Interpreting logs and signals from Microsoft 365, Azure, endpoints, and AI systemsSupporting detection engineering and threat-informed defense strategiesAbility to lead in complex, ambiguous environments, including:Rapidly assessing risk and prioritizing high-impact outcomesDriving technical decision-making with incomplete informationMentoring junior engineers and elevating overall team capabilityWhat we prefer you to have:Experience with prompt engineering techniques or semantic caching.A firm understanding of the OWASP Top 10 for LLMs.Experience working with Data Security Posture Management (DSPM) tools.Experience supporting data leakage or insider threat programsRelevant Cybersecurity certificationsAI-102 (Azure AI Engineer Associate)AI-900 (Microsoft Azure AI Fundamentals)SC-400 (Information Protection Administrator)MS-102 (Microsoft 365 Administrator)CompTIA Security+CompTIA SecAI+Role Factors:In this role, you will support enterprise-wide data protection and governance initiatives leveraging Microsoft 365 platforms. This includes safeguarding sensitive data, enabling secure collaboration, and supporting emerging AI technologies like Copilot by ensuring proper data classification and protection standards are in place. The work is highly visible and directly impacts how the organization securely manages and scales its data environment.What we offer:For this position, we currently expect to offer a base salary in the range of $90K - $110K Your salary offer will be based on an assessment of a variety of factors including your specific experience and work location. In addition, you will be offered competitive target incentive compensation, with awards based on overall corporate and individual performance. On top of this, you will be eligible for a comprehensive and competitive benefits package which includes medical plans for you and your family, health and wellness programs, retirement plans, tuition reimbursement, paid vacation, and much more.  Where this role is based in the United States of America, this role is exempt for FLSA purposes.This posting is for an existing vacancy.SummaryLocation: Alpharetta, GA; San Francisco, CA; Chicago, IL; Stamford, CT; New York, NY; Red Bank, New Jersey; Los Angeles, CA; Princeton, NJ; Kansas City, MO; Short Hills, NJ; Scottsdale, AZType: Full time