AI Runtime & Trust Security Advisor II

Calling all innovators - find your future at Fiserv.We're Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we're involved. If you want to make an impact on a global scale, come make a difference at Fiserv.Job TitleAI Runtime & Trust Security Advisor IIAbout your roleThe AI Runtime & Trust Security Advisor II helps lead the security of AI in production — both what deployed AI does and what it is allowed to do — detecting AI-specific threats such as prompt injection, jailbreaks, and inference-time data exfiltration while helping govern identity, authorization, and secrets for AI systems and agents. The role leverages AI protection tooling along with building detection in-house: commercial AI observability and guardrail platforms (e.g., Arize, Fiddler), data security posture management for AI (e.g., Varonis), and the enterprise SIEM/SOAR, IAM, and secrets stack. Sitting within Cybersecurity, this role helps lead a cross-functional model that connects Cyber's services with the SOC, IAM, Data Governance, and platform teams as Fiserv scales AI in production.What you’ll doLead operationalizing runtime monitoring, guardrails, and model-integrity checks for production AI workloads using commercial AI observability and guardrail platforms — detecting prompt injection, jailbreaks, model abuse, drift, and anomalous inference, and tuning thresholds and alert quality.Serve as the primary SOC liaison for AI security events — providing platform context, triage support, and expertise on AI-specific attack patterns general SOC analysts may not recognize — and help maintain AI-specific incident response playbooks.Help lead the enterprise authorization model for agentic AI — partnering with IAM and the AI Center of Excellence to define what agents may do, on behalf of whom, with what tool scope and duration — and help extend the identity fabric to AI agents as first-class principals (workload identity standards such as SPIFFE/SPIRE, OIDC).Operate identity anomaly detection and policy enforcement for AI workloads and agents, adjudicating scope violations and out-of-scope tool calls.Help lead data security posture for AI in partnership with Data Governance — operating DSPM tooling (e.g., Varonis, Cyera, or equivalent) to detect and reduce over-permissioned data exposure to copilots and agents, and responding to AI data-exposure findings.Partner with the Cloud and platform teams to define and operate secrets hygiene and network egress controls for AI workloads, particularly agent tool-call boundaries and model API access.Adjudicate novel authorization requests and escalations that require human judgment on risk tolerance, and lay the groundwork for a future automation layer as the program matures.Responsibilities listed are not intended to be all-inclusive and may be modified as necessary.Experience you’ll need to have7+ years in security engineering spanning at least two of: AI/ML runtime security, security operations and detection engineering, and identity / trust engineering.Hands-on familiarity with AI attack patterns: prompt injection, jailbreaks, model inversion, and inference-time data exfiltration.Experience operating commercial AI observability and/or guardrail platforms (Arize, Fiddler, or equivalent) and SIEM/SOAR (Splunk, Microsoft Sentinel, Chronicle, or equivalent).Direct experience securing non-human and service identities, including workload identity standards (SPIFFE/SPIRE, OIDC) and authorization policy engines (Open Policy Agent, Cedar).Working knowledge of data security posture management (Varonis, Cyera, BigID, or equivalent) and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).Comfort partnering across the SOC, IAM, Data Governance, and platform teams, leading shared outcomes through influence.Bachelor's degree in Computer Science, Cybersecurity, or a related field, and/or equivalent work experience.Experience that would be great to haveExperience in financial services or other regulated industries with AI-specific compliance, privileged access management, or non-human identity governance at scale.Hands-on experience with LLM red teaming or adversarial ML testing.Experience designing authorization models for multi-agent AI systems — delegation chains, capability scoping, and time-bounded access grants.Certification in CISSP, CISM, CCSP, or equivalent; security operations or IAM certifications.Familiarity with AI network egress controls (tool-call boundaries, model API access) and zero trust applied to machine identities.How you’ll workThis role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity.TravelApproximately 10% travel off-site or to other office locations is expected.SponsorshipYou must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered.#LI-RM1Salary Range$128,000.00 - $216,000.00These pay ranges apply to employees in New Jersey and New York. Pay ranges for employees in other states may differ.It is unlawful to discriminate against a prospective employee due to the individual's status as a veteran.For incentive eligible associates, the successful candidate is eligible for an annual incentive opportunity which may be delivered as a mix of cash bonus and equity awards in the Company’s sole discretion.Thank you for considering employment with Fiserv. Please:Apply using your legal nameComplete the step-by-step profile and attach your resume (either is acceptable, both are preferable).Our commitment to Equal Opportunity:Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law. If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact View email address on click.appcast.io. Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv’s Disability Accommodation Policy for additional information.Note to agencies:Fiserv does not accept resume submissions from agencies outside of existing agreements. Please do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions.Warning about fake job posts:Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address.SummaryLocation: Berkeley Heights, New Jersey; Alpharetta, Georgia; Columbus, OhioType: Full time