Forward Deployed AI Security Lead

Overview Collaborative. Respectful. A place to dream and do. These words describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. The role is within Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. At TFS, you will help create a best‑in‑class customer experience in an innovative, collaborative environment. Location: Plano, Texas We’re Looking For Forward Deployed AI Security Lead within the Security Intelligence Engineering organization. You will own the intelligence platform end‑to‑end, embedding with internal security teams as customers and building AI systems that transform their workflows. Responsibilities Embed directly with security team leads across multiple functions to deeply understand their workflows, tools, and pain points. Lead discovery sessions to identify high‑value automation opportunities — translating security operations problems into AI‑solvable technical specifications. Own the structured intake process: prioritize requests by cross‑team impact and risk reduction value, and communicate capacity and timelines transparently. Design and build multi‑agent architectures using managed AI services — autonomous triage agents, cross‑source correlation agents, and team‑specific specialist agents. Implement RAG systems over a centralized security data lake for natural language threat hunting and investigation. Build prompt engineering patterns, evaluation frameworks, and feedback loops that continuously improve agent accuracy. Design a model routing layer that directs each task to the optimal model based on complexity, latency, and cost. Implement centralized token usage monitoring and cost controls for leadership visibility. Own agent observability: monitor for drift, hallucination detection, accuracy degradation, and failure mode identification. Architect human‑in‑the‑loop controls and guardrails to ensure agents operate safely within defined boundaries. Design and build API connectors to enterprise security tools (EDR/XDR, cloud security, API security, identity, vulnerability management). Architect the cross‑source correlation engine that links findings across endpoint, cloud, identity, and network data. Define and evolve the data lake schema and ingestion pipelines for security telemetry. Build and maintain dashboards serving multiple security teams with team‑specific views. Set engineering standards, code review practices, and architectural patterns as the team grows. Serve as the trusted technical advisor to security leadership — translating complex AI/ML capabilities into clear, actionable security outcomes. Qualifications 5+ years building production systems, with strong Python and TypeScript fluency. 1+ years hands‑on experience with LLMs in production or near‑production contexts — prompt engineering, RAG architectures, agentic workflows, or fine‑tuning. Hands‑on experience with security tool APIs — particularly EDR/XDR platforms. Strong AWS foundation: S3, Lambda, RDS, IAM, VPC, and familiarity with managed LLM services (e.g., Amazon Bedrock). Understanding of security operations workflows — alert triage, investigation chains, incident response, threat intelligence correlation. Demonstrated ability to work directly with non‑engineering stakeholders, translating business/operational problems into technical solutions, managing expectations, and delivering outcomes. Experience building full‑stack applications (API layer + frontend) that serve multiple user groups. Strong communication and interpersonal skills with the ability to influence cross‑functional teams without direct authority. Bonus: Experience with multi‑agent orchestration frameworks. Bonus: Background in a forward‑deployed, solutions engineering, or customer‑embedded technical role — or early‑stage startup experience. Bonus: Experience with cloud security posture management platforms. Bonus: MITRE ATT&CK framework knowledge and practical application to detection engineering. Bonus: Experience building evaluation pipelines for AI systems — automated metrics, human evaluation protocols, A/B testing. Bonus: Background in financial services security or regulated environments (SOX, SOC2). Bonus: Experience with model serving optimization, cost management, and token usage monitoring. Bonus: Familiarity with vector databases and retrieval system design. Benefits Work environment built on teamwork, flexibility, and respect. Professional growth and development programs, including tuition reimbursement. Vehicle purchase & lease programs. Comprehensive health care and wellness plans for your entire family. Toyota 401(k) Savings Plan with company match and annual retirement contribution. Paid holidays and paid time off. Referral services related to prenatal services, adoption, childcare, schools and more. Tax‑advantaged accounts (Health Savings Account, Health Care FSA, Dependent Care FSA). Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law. #J-18808-Ljbffr