IT Security Specialist

Senior AI Security Controls Engineer

Genesis10 is currently seeking a Senior AI Security Controls Engineer for an Onsite position with a Global Financial Institution located in Charlotte, NC, Pennington, NJ or Plano, TX. This is a 12+ month contract opportunity.

We are seeking a Senior AI Security Controls Engineer to design, implement, and operationalize security controls for enterprise AI solutions, including Microsoft 365 Copilot, Copilot Chat, Copilot Studio, Power Platform, and related Microsoft cloud services. This role will focus on protecting enterprise data, monitoring AI and user activity, detecting misuse, and enabling the secure adoption of AI capabilities through Microsoft Purview, Defender XDR, Defender for Cloud Apps, Sentinel, Entra ID, and Power Platform governance tools. The successful candidate will help establish and mature the organization's AI security governance framework by defining how AI solutions are monitored, governed, audited, and secured.

Responsibilities:

• Design and implement security controls for Microsoft 365 Copilot, Copilot Studio, Power Platform, and AI agents
• Deploy and manage Microsoft Purview capabilities, including DLP, sensitivity labels, auditing, Insider Risk Management, Communication Compliance, eDiscovery, and DSPM for AI
• Develop monitoring and detection capabilities to track AI usage, user behavior, agent activity, data access patterns, and policy violations
• Build and maintain Microsoft Sentinel detections, KQL queries, analytics rules, dashboards, and alerting leveraging signals from Purview, Defender, Entra ID, Copilot, and Power Platform
• Utilize Microsoft Defender XDR and Defender for Cloud Apps to detect anomalous behavior, risky applications, excessive permissions, and potential data exfiltration
• Establish AI user and agent risk profiles based on access patterns, data sensitivity, security violations, and suspicious activity
• Partner with SOC teams to operationalize AI-related monitoring, investigations, incident response procedures, and escalation processes
• Implement governance controls for Copilot Studio agents, including ownership, publishing standards, connectors, permissions, data sources, and lifecycle management
• Support Power Platform governance through DLP policies, connector governance, environment strategy, maker controls, privileged access reviews, and monitoring
• Identify and mitigate risks related to oversharing, prompt misuse, shadow AI, unauthorized connectors, unmanaged agents, and sensitive data exposure
• Develop executive reporting and dashboards that provide visibility into AI security posture, adoption trends, policy violations, and remediation efforts
• Create and maintain security standards, control documentation, risk assessments, audit evidence, and governance reporting
• Collaborate with cybersecurity, compliance, legal, risk, architecture, product, engineering, and business teams to align AI controls with enterprise policies and regulatory requirements
• Continuously enhance AI security controls based on emerging threats, audit findings, business adoption, and new Microsoft capabilities

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field
• 7+ years of experience in cybersecurity, cloud security, Microsoft 365 security, data protection, security operations, or compliance engineering
• Hands-on experience implementing security and compliance controls in Microsoft Purview
• Hands-on experience with Microsoft Defender XDR, Defender for Cloud Apps, and/or Defender for Endpoint
• Hands-on experience with Microsoft Sentinel, including KQL, analytics rules, hunting queries, dashboards, and incident workflows
• Experience with Microsoft 365 Copilot, Copilot Chat, Copilot Studio, Power Platform, Power Apps, Power Automate, Dataverse, connectors, or related Microsoft 365 services
• Strong understanding of DLP, sensitivity labels, audit logging, insider risk, communication compliance, eDiscovery, and data classification
• Strong understanding of Entra ID, conditional access, OAuth applications, app consent, privileged access, and RBAC
• Experience designing controls for user behavior monitoring, insider risk, data protection, app governance, and cloud security
• Ability to analyze logs, build detections, tune alerts, and support security investigations
• Strong documentation and communication skills with the ability to explain technical risks and controls to executive, audit, compliance, and engineering audiences

Desired Skills:

• Experience securing Microsoft 365 Copilot, Copilot Studio agents, Power Platform, or enterprise generative AI platforms
• Experience with Microsoft Purview DSPM for AI, Microsoft Security Copilot, or Copilot Control System
• Experience in financial services, banking, healthcare, insurance, government, or another regulated environment
• Experience building user risk scoring, behavioral analytics, misuse detection, or insider-risk monitoring programs
• Experience with Power Platform Center of Excellence, Managed Environments, environment governance, and connector DLP policies
• Experience with AI-specific risks such as prompt injection, sensitive data leakage, grounding failures, shadow AI, unsafe connector usage, and unmanaged agent proliferation

Pay range: $65.90 - $73.90 per hour

Only candidates available and ready to work directly as Genesis10 employees will be considered for this position.

If you have the described qualifications and are interested in this exciting opportunity, please apply!

Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals.

For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10:

• Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.
• The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
• Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
• Behavioral Health Platform
• Medical, Dental, Vision
• Health Savings Account
• Voluntary Hospital Indemnity (Critical Illness & Accident)
• Voluntary Term Life Insurance
• 401K
• Sick Pay (for applicable states/municipalities)
• Commuter Benefits (Dallas, NYC, SF, and Illinois)

For multiple years running, Genesis10 has been recognized as a Top Staffing Firm in the U.S., as a Best Company for Work-Life Balance, as a Best Company for Career Growth, for Diversity, and for Leadership, amongst others. To learn more and to view all our available career opportunities, please visit us at our website.

Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.